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app has surfaced: cloudbursting page 21 
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move to a virtual infrastructure without the new man- 
agement overhead page 22 

SECURITY 

■ Security is one of the biggest issues faced In setting 
up mobile/remote network connectivity. Manufacturers 
have answered the call through secure borderless, or 
deperimeterized, networks page 1 

■ Most employees don't set out to endanger their 
employers' networks and operations. Unwittingly, though, 
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Budget-Savvy Security 

Get More Than What You Paid For By Maximizing Your Budget 



by Chris A. MacKinnon 

Whether a security plan succeeds or fails 
is largely tied to how a company makes use 
of its budget. Poor budgetary decisions and 
bad investments can quickly lead to insuffi- 
cient security. So how can data center and IT 
managers be confident that they are making 
the right investments in security? What areas 
of security budgets can be improved? What 
budget tweaks can provide managers the 
most bang for their bucks? 

Security Ranks 

Stephen Pao, vice president of prod- 
uct management at Barracuda Networks 
(www.barracudanetworks.com), says secu- 
rity should rank high in terms of priority in 



Key Points 



Security spending isn't always top-of-mind 
for decision makers, so IT should stress 
the potentially serious costs that come with 
data breaches. 

Investing wisely and following the guidelines 
laid out for best practices can help you 
make the most of your budget, whether 
large or small. 

Security spending is dynamic, not static, so 
IT should make a concentrated effort to stay 
up-to-date on the latest threats and to take a 
proactive approach to ensuring security. 




the overall budget. "Security should be a 
top-three IT budget priority for most organ- 
izations," he explains. "Attacks and data 
breaches are growing more targeted and 
more sophisticated; therefore, without the 
right investments and solutions in place, 
an organization risks exposing confiden- 
tial information, intellectual property, or 
other sensitive data should a breach or 
attack occur." In addition, Pao says the 
amount of time needed to repair crit- 
ical network infrastructure or to recoup 



data loss can be financially damaging to 
any organization. 

According to many analysts, IT security 
spending varies significantly as a percent- 
age of overall IT spending, depending on 
the vertical industry. However, according 
to Terry Brown, director of marketing for 
Irdeto's Cloakware Enterprise division 
(www.irdeto.com/cloakware), IT security 
spending is seeing the largest increase 
across the board, indicating that security 
Go to Page 8 



Security Strategies For 
Deperimeterized Networks 

The Shift From Defending Networks 

To Protecting Devices, Applications & Data 



by Kurt Marko 

• ■ ■ 

Enterprise networks have traditionally 
resembled a collection of feudal fiefdoms, 
each mutually suspicious, with the Internet as 
the uncontrolled wilderness linking them. 
The prevailing security model assumes 
everything inside the corporate border is 
trustworthy, and outside the network perime- 
ter, you're guilty until proven innocent. As 
cyber malefactors and their exploits became 
more sophisticated, virulent, and potentially 



costly, IT responded with increasingly elabo- 
rate defenses to keep the barbarians outside 
the gate, while equipment manufacturers 
catered to this "moat-and-castle" architec- 
ture, layering feature upon feature to their 
edge security devices. 

Then came Web 2.0, SaaS, and ubiquitous 
connectivity, with employees, applications, 
and data no longer neatly confined within the 
corporate firewall. IT's initial reaction to 
creeping connectedness was to surgically 
poke holes in perimeter defenses, but this 



patchwork solution is becoming untenable. 
"The borders are getting more porous," says 
Paul Simmonds, CSO for a major corpora- 
tion and board member of the Jericho Forum, 
an industry group established to evangelize a 
new security architecture they christened 
"deperimeterized networks." 

"The next five years are going to be a peri- 
od of very significant change in the enter- 
prise network environment, and it's really 
driven by two major trends," says Tom 
Gillis, vice president and general manager of 
Cisco's Security Technology Business Unit 
(www.cisco.com). "The first is a trend 
toward mobility — more people will be 
accessing more content from more different 
types of devices in more places in the net- 
work than ever before." 

The mirror image of the trend toward 
mobility is that toward cloud computing," 
says Gillis. "Not only do I have end users on 
the move, but I have data that's on the 
move — my core, sensitive data may or may 
Go to Page 8 
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News 



I Carrier Ethernet Market 
Growing Rapidly 

According to Infonetics Research, the carrier 
Ethernet market is growing at a quicker pace 
than other telecom capital expenditures. Rout- 
ers, carrier Ethernet switches, and optical gear 
are the biggest sections of the carrier Ethernet 
equipment market, but Ethernet microwave is 
growing the fastest overall, thanks to its mo- 
bile backhaul demands. Infonetics Research 
says the industry was stimulated by a switch 
to next-generation IP network transformation 
projects, as well as consumer, business, and 
mobile traffic development. Service providers 
invested $21 .6 billion in carrier Ethernet last 
year, and Infonetics predicts that by 2014, 
investments in carrier Ethernet equipment 
will climb to more than 
$32 billion. 

I Gartner 
Forecasts 
Global IT 
Services Growth 

Although global IT ser- 
vices profits ^ 

dropped by ^'^^^^^^''''o/ey,,. 
5.3% in 2009, Gartner ^Oiooi 
says the industry is qQ^^^^ 
poised to make a 
comeback. Kathryn 
Hale, research vice president 
at Gartner, attributes the opti- 
mistic outlook to the industry's ability to modify 
its business goals in the wake of the recent 
recession. Hale said in a release from Gartner 
that organizations switched their emphasis to 
maintaining revenues and managing costs and 
profitability and turned from more assertive tac- 
tics. Hale's comments tie in to the IVlay 2010 
Worldwide IT Services Vendors by Revenue 
report, which cites Accenture with the largest 




decline (1 1 .8%), followed by HP (10.4%) and 
IBM (6.6%). 

I Comtech To Buy CPI 
In $472 \mm Deal 

CPI International, a maker of radar signal 
transmission and electronic countermeasure 
products for military, commercial, and medical 
products, will soon be a part of Comtech 
Telecommunications following a purchase deal 
worth $472 million. Comtech, which special- 
izes in RF microwave amplifiers, mobile data 
communications, and telecommunications 
transmission, hopes to leverage the acquisition 
to improve its standing as a one-stop shop for 
RF offerings by incorporating CPI's techolo- 
gies. The acquisition will be finalized pending 
regulatory and CPI stockholder approval; a 
majority of CPI stockholders have already 
approved the transaction. 

I Survey: Verizon 
Is Tops In Customer 
Satisfaction 



,J0010T00-[ 



About half (49%) of 
Verizon's cell phone cus- 
tomers are "very satis- 
fied" with the carrier's 
service, according 
'-S'z^ to a recent sun/ey 

conducted by Change- 
Wave Research. Verizon subscribers 
also reported that the carrier dropped the 
fewest calls, with a record low 1 .5% over a 
three-month period, and stood to lose the 
fewest customers (7%) to churn in the next 
quarter. In contrast, AT&T's "very satisfied" 
customers (23%) and record high dropped call 
rate (4.5%) nevertheless didn't translate into a 
proportionally larger planned exodus (8%) — 
which, according to ChangeWave, could have 
much to do with the carrier's current status as 
the exclusive sen/ice provider for the iPhone. 



WATCH THE 

This information provides a quick glimpse of current and historical stock 
j^^^^^ J^j^ prices and trends for 13 major companies in the technology market. 



Company 


Symbol 


Year Ago 


April 29 $ 


May 13$ 


% change from 
previous issue 


AMD 


AMD 


$4.24 


$9.72 


$9.42 


T 3.09% 


CA 


OA 


$18.27 


$23.42 


$21.88 


T 6.58% 


Cisco Systems 


CSCO 


$18.09 


$27.53 


$25.53 


T 7.26% 


Dell 


DELL 


$10.93 


$16.65 


$15.44 


T 7.27% 


Google 


GOOG 


$387.50 


$532 


$510.88 


T 3.97% 


HP 


HPQ 


$34.93 


$52.88 


$48.72 


▼ 7.87% 


IBM 


IBM 


$101.05 


$130.46 


$131.48 


A 0.78% 


Intel 


INTO 


$15.54 


$23.49 


$22.50 


T 4.21% 


McAfee 


MFE 


$38.03 


$39.53 


$34.37 


T 13.05% 


Microsoft 


MS FT 


$20.06 


$31 


$29.24 


T 5.68% 


Oracle 


ORCL 


$18.46 


$25.97 


$24.24 


T 6.66% 


Red Hat Software 


RHT 


$18.12 


$30.78 


$30.76 


T 0.06% 


Symantec 


SYMC 


$14.90 


$17.14 


$16.37 


T 4.49% 



NOTE: This information is meant for reference oniy and should not be used as a basis for buy/sell decisions. 



I Study Highlights 

Cloud Computing Concerns 

According to new research from CA and the 
Ponemon Institute, more than half of the IT pro- 
fessionals sun/eyed believe that their companies 
are unaware of just how many Web-based ser- 
vices they are using. Slightly fewer (47%) believe 
that their companies were evaluating the security 
of cloud services before adopting them. Less 
than 30% were confident about controlling privi- 
leged user access to sensitive data in the cloud, 
and 68% believe that cloud storage is too risky 
to store their companies' intellectual property 
and financial data. Only four in 10 (38%) said 
that their enterprises had determined certain data 
was too sensitive to put online. 

I PCI Security Standards Council 
Releases New Requirements 

The group behind the Payment Card Industry 
Data Security Standard has updated the stand- 
ard's requirements for PIN Transaction Security, 
which it hopes will increase PoS card reader 
security. Version 3.0 of the PTS POI (Point of 
Interaction) security standard is immediately 
effective and streamlines testing for terminals 
and listing of products. Previously, there were 
three different sets of PTS requirements for PIN 
entry devices, unmanned payment terminals, 
and password-protected PIN pads. Originally 
organized by Visa, MasterCard, American Ex- 
press, and similar credit card companies, each 
company must set its own enforcement dead- 
lines to meet the latest requirements. 

I Cisco Third-Quarter Profits Up 63% 

Cisco announced that its net income for 03 
2010 was $2.2 billion, or 37 cents per share — 
a gain of 63% year over year, up from $1 .3 
billion. Additionally, the company's revenue 
climbed 27% year over year, from $8.2 billion 
to $10.4 billion, exceeding its predictions of $10 
billion to $10.3 billion. Cisco also expanded its 
staff by hiring 1 ,000 people in its third quarter 
and closed a $3.4 billion acquisition of Nor- 
wegian teleconferencing supplier Tandberg. 
The company is predicting continued growth 
for the fourth quarter, estimating revenue of 
between $10.7 billion and $10.9 billion. 

I HTC Countersues Apple 

The legal fight that Apple started with HTC over 
patent infringements has escalated. Apple sued 
HTC in March over 20 alleged patent infringe- 
ments, and HTC has now filed a patent complaint 
with the International Trade Commission asking 
for the cessation of all iPhone, iPod touch, and 
iPad imports to the United States concerning five 
HTC patents that the company says Apple violat- 
ed. The patents in question include multitouch 
capabilities and phone number storage and 
lookup. HTC already has patent agreements with 
Microsoft, and it's possible that the outcome of 
the Apple dispute will be a similar arrangement. 
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News 



I Cloud Computing On The Rise 

According to a report from research firm IDC, 
the cloud computing market will grow to about 
$12.6 billion by 2014, up from $7.3 billion in 

2009. Private clouds will account for $1 1 .8 bil- 
lion of the total, while the public cloud market 
will reach $718 million. Private clouds are more 
popular than public clouds, partly due to con- 
cerns on the part of consumers over the securi- 
ty of public clouds. Further, the report found 
that private clouds are more enterprise-focused 
than public clouds, and many IT managers are 
considering moving to a private cloud model for 
Internet-based sen/ices. 

I SAP To Acquire Sybase 

SAP, a top vendor of business management 
software, recently announced that it plans to 
purchase Sybase, a manufacturer of database 
management software, for about $5.8 billion. 
SAP's product line includes CRM, ERP, prod- 
uct lifecycle and supply chain management, 
and supplier relationship management soft- 
ware. SAP says that the acquisition of Sybase 
will allow it to offer solutions across a mobile 
platform and drive adoption of SAP software. 
SAP also says Sybase will remain a stand- 
alone unit and will help SAP expand its event 
processing and analytics knowledge. 

I iPad Could Top Sales Records 

According to Yankee Group analyst Carl Howe, 
the Apple iPad could quickly become the con- 
sumer electronic device 
that hits the $1 billion sales 
mark in the least amount of 
time. That's if current sales 
rates continue throughout 
the rest of May. The IPad 
was released on April 3, 
and, according to Howe, 
Apple's own stores are still 
unable to meet sales 
demands, and consumers 
are facing wait times of a 
week or more. Apple hasn't 
yet released the total revenue it has earned 
from the sale of nearly 1 .5 million iPads and 
hasn't yet started selling the units outside of 
the United States. 

I Gates Foundation Keeps On Giving 

The Bill & Melinda Gates Foundation recently 
handed out $100,000 apiece to 78 science pro- 
jects in the fourth round of the Grand Challenges 
Explorations grant initiative. The $100 million, 
five-year initiative aims to promote innovation 
in global health and is part of the Grand Chal- 
lenges in Global Health initiative the Gates 
Foundation supports. Current grants were 
awarded for such projects as developing a low- 
cost cell phone microscope to diagnose malaria, 
investigating the placement of insect-eating 
plants to reduce insect-borne diseases, and 
developing nanoparticles that release vaccines 
when contacting human sweat. To date, 340 
Exploration projects have been awarded grants. 
Round five of funding is to occur in October 

2010. Recent grantees come from universities, 
research institutes, and nonprofit organizations. 

I Gartner Finds SaaS Usage 
Shooting Upward 

According to a survey conducted by Gartner of 
270 IT and business management profession- 
als, more than 95% of organizations expect to 
maintain or grow their use of SaaS. The top 
three reasons cited were significant integration 
requirements, a change in sourcing strategy, 
and high total cost of ownership. Somewhat 
surprisingly, Gartner's research also found that 
only 39% of respondents say their companies 
had policies in place to govern the evaluation 
and use of SaaS. That's up just 1% from 2008. 
Among the most popular SaaS apps currently 
in use are email, financial management, sales- 
force automation and customer service, and 
expense management. 




I Report Shows PDF Security Woes 

In its recent Security Intelligence Report, Micro- 
soft indicates that more than 46% of browser- 
based exploits during the second half of 2009 
were designed to attack the Adobe Reader 
PDF viewer. Microsoft has patched Adobe 
Reader vulnerabilities three times: in May 
2008, November 2008, and March 2009. Most 
of the attacks occur in Adobe Reader installa- 
tions that haven't been updated. As a counter- 
measure, Adobe started a service in April that 
silently updates a PC's copy of Adobe Reader 
and Adobe Acrobat. Microsoft found that the 
64-bit versions of Windows 7 and Vista SP2 
had the lowest infection rates compared to 
other editions of Windows. 

I HDDs Still Going Strong 
In Enterprise Use 

According to the Worldwide Hard Disk Drive 
2010-2014 Forecast from IDC, the number of 
hard disk drives in enterprises will increase 
from 40.5 million in 2009 to 52.6 million in 
2014. The demand for the new hard 
drives, which are being pushed for 
market share by SSDs, will come 
from storage as a service or in the 
cloud from data centers. IDC also 
expects that there will be a shift 
away from the higher-cost, perfor- 
mance-optimized hard drives to low- 
cost, high-capacity SATA drives. 
SSDs will overtake 10,000rpm or 
15,000rpm hard drives that 
use either a Fibre Channel or serial- 
attached SCSI interface. 

I Global Software Piracy 
On The Rise 

The Business Software Alliance and 
IDC have determined that for every 
$100 in legitimate software sales that 
occurred in 2009, another $75 in soft- 
ware was pirated. That amounts to a 
43% global software piracy rate, which 
is 2% higher than 2008's rate. The 
Sixth Annual BSA-IDC Global Software Piracy 
Study blames the rise on higher PC sales in 
emerging markets; 86% of the growth in PC 
shipments occurred in Brazil, India, and China. 
Piracy in 2009 was responsible for more than 
$51 billion in lost commercial value. Other find- 
ings include a rise in piracy rates in 19 global 
economies (rates rose in 16 global economies 
in 2008). But some regions managed to shrink 
software piracy: India, Chile, and Canada all 
experienced 3% declines in piracy rates com- 
pared to 2008. 

I Smartphone Shipments Impress 

According to IDC's Worldwide Quarterly Mobile 
Phone Tracker, smartphone shipments grew 
56.7% in 01 . The firm also believes 2010 will 
be another banner year for the handheld 
devices from Research In Motion, Symbian, 
Apple, Windows Mobile, and others. Nokia 
shipped the most phones, with 21.5 million, fol- 
lowed by Research In Motion, which shipped 
10.6 million BlackBerrys. Apple shipped 8.8 mil- 
lion iPhones in 01, which represents a 132% 
rise (the highest increase of the bunch) com- 
pared to the same period in 2009. HTC shipped 
2.6 million phones, and Motorola shipped 2.3 
million. In total, 54.7 million smartphones 
shipped globally, whereas in 01 2009, just 34.9 
million devices shipped. 

I Browser Vulnerabilities Cited 

Security glitches discovered in Apple Safari 
for Windows and in the Mac and Windows ver- 
sions of Opera could theoretically allow hack- 
ers to remotely launch malicious attacks on 
users' systems. The Safari issue has been con- 
firmed in Safari 4.0.5 for Windows, and testing 
of other versions is unden/vay. At press time, 
Apple had not released a patch for the vulnera- 
bility, but the U.S. Computer Emergency Readi- 
ness Team has suggested that users disable 




the browser's JavaScript function until a fix 
is released. Opera also warned users of a 
similar "extremely severe" issue in its brows- 
er, but patched the vulnerability in its Opera 
10.53 update. 

I Nokia To Reorganize Once More 

Finnish mobile handset behemoth Nokia has 
announced that the company, which has reor- 
ganized several times over the past decade, 
most recently in 2008, will be revamping its 
structure once again. The company intends to 
reorganize its business units into three sepa- 
rate entities — Mobile Solutions, Mobile Phones, 
and Markets — in order to create what it calls a 
simplified company structure. The new Mobile 
Solutions unit will handle high-end Symbian- 
based smartphones and mobile computers, 
while the Mobile Phones group will take re- 
sponsibility for the company's more affordable 
Series 40 operating system mobile phones. 
The Services division, now part of the Mobile 
Solutions unit, will concentrate on creating new 
mobile phone services to be added to the 
lower-cost devices. 

I Chip Shipments 
Drop, But Less 
Than Usual 

Worldwide shipments of 
PC microprocessors 
dropped 5.6% between 
the fourth quarter of last 
year and the first quarter 
of this year, according to 
IDC. However, the decline is viewed as a pos- 
itive sign. "PC processor shipments typically 
decline around 7 to 8% going from fourth 
quarter to first quarter," says IDC director 
Shane Rau, so a drop of just 5.6% adds credi- 
bility to signs of a market recovery. When 
compared to a year ago, IDC stats show that 
first-quarter shipments grew 39%; revenue 
was up 40.4% from a year ago but down 2% 
compared to the fourth quarter. Between the 
fourth quarter of last year and first quarter of 
this year, sales of mobile PC processors 
dropped 6.3%, desktop PC processor sales 
were down 5.1%, and sales of PC server 
processors were down 1 .4%. Average selling 
price, though, was up 4.1%, primarily on sales 
of more high-end processors. 

I Semiconductor Industry 
To See Record Growth 

"The semiconductor industry is set to achieve 
remarkable revenue growth and record size in 
2010," said iSuppli Senior Vice President Dale 
Ford in announcing the research company's 
market predictions for the coming year. iSuppli 
says annual semiconductor revenue could 
reach $300.3 billion, up 30.6% from 2009. Ford 
says sales will be helped by strong consumer 
demand, diligent inventory and capacity man- 
agement on the part of chipmakers, and new 
innovative technologies. To get the full picture 
of growth, though, iSuppli says you need to look 
beyond the dismal 2009; compared to 2008, 
semiconductor industry growth will be 15.4%. 

I FCC Considers Plan To Warn 
Of High Cell Phone Bills 

In an effort to avoid "bill shock," the Federal 
Communications Commission is developing a 
plan that would require wireless carriers to 
inform their customers when they run up 
unusually high data usage, roaming, and other 
fees over a short period of time. The FCC's 
Consumer and Governmental Affairs Bureau 
started the initiative after receiving hundreds 
of complaints from consumers who received 
unexpected charges on their bills totaling hun- 
dreds or even thousands of dollars. The FCC 
is studying whether American carriers could 
adopt regulations similar to the European 
Union, where wireless companies are required 
to alert their customers when they incur roam- 
ing charges or get close to their set data 
usage limits. 
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Are you looking to learn more about data center 
or IT topics? Network with some of your peers? 

Consider joining a group of data center 
professionals. If you have an event you'd like 
listed, please send an email to 
feedback@processor.com. 



-MAY- 

ISSA Upstate 
South Carolina 

May 21 

NuVox 

301 N. Main St., Suite 5000 
Greensville, S.C. 
www.upstate-issa.org 



ISSA Des Moines 
May 24 
3920 SW Camden Circle 

Ankeny, Iowa 
www.issa-desmoines.org 



AITP Akron 

May 25 
Akron, Ohio 
www.akron-aitp.org 



ISSA Inland Empire 
May 25, 11:30 a.m. 
Coco's Restaurant and Bakery 
60 West Foothill Blvd. 
Upland, Calif. 
ie.issa.org 



ISSA Baltimore 
May 26, 4:30 p.m. 
Sparta Inc. 
7110 Samuel Morse Drive, Suite 200 
Columbia, Md. 
www.issa-balt.org 



AITP California Southland 

May 26 
www.aitpcalsouthland.org 

- JUNE- 

7x24 Exchange 
Spring Conference 
June 6-9 
Boca Raton Resort and Club 
Boca Raton, Fla. 
www.7x24exchange.org/spring10/index.htm 



AITP Garden State 
June 8 

Jim Johnston's Steakhouse 
58 Eisenhower Parkway Mountain Plaza 
Roseland, N.J. 
tech.groups.yahoo.com/group 
/aitpgardenstatechapter 



AITP Richmond 
June 8 
2015 Staples Mill Road 
Richmond, Va. 
www.aitprich.org 



PASS Wisconsin SQL Server 
User's Group 
June 8, 4:30 
Microsoft Office 
2176 Woodcrest Drive 

Green Bay, Wis. 
wisconsin.sqlpass.org 



AITP San Diego 
June 9, 5:30 p.m. 
National University-Kearny 
Mesa Campus 
3678 Aero Court 
San Diego, Calif. 
sandiego.aitp.org 



Greater Wheeling AITP 
June 9 
Wheeling, W.Va. 
www.aitp-wheeling.org 



ISSA Parsippany 

June 9 
Deloitte Services 
100 Kimball Drive 
Parsippany, N.J. 
nj.issa.org 



ISSA San Diego 

June 9 
San Diego, Calif. 
www.sdissa.org 



Southern New England SQL Server 
User's Group 
June 9 
www.snessug.com 



For more Upcoming IT Events, see page 10. 
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The Processor Product Releases section 
includes brief overviews of data center products. 

All products listed have been released recently, so use this section to get 
up-to-date with what's new on the market and to find products you need. 




Clients 



■ Cavium Networks Octeon II CN68XX 
& CN67XX 64-bit MIPS Processors 

Cavium Networks launched its latest fam- 
ily of 64-bit-capable MIPS processors, 
which are ideally suited to secure cloud ser- 
vices, mobile Internet, and borderless enter- 
prise applications. The Octeon II CN68XX 
and CN67XX processors feature between 




Cavium 
Networks 



eight and 32 enhanced MIPS64 cores for up 
to 48GHz of 64-bit compute power from a 
single chip. The new processors also feature 
more than 85 L3-L7 application and securi- 
ty acceleration engines, virtualization fea- 
tures, lOOGbps of connectivity, and a new 
Real Time Power Optimizer, which is capa- 
ble of scaling power based on application- 
level processing demands. The Octeon II 
CN68XX and CN67XX processors will be 
available in Q4 2010. For more on this 
product, see page 39. 

■ Datawatch Dashboards For Service 
Management 

Datawatch announced Datawatch Dash- 
boards For Service Management, a statis- 
tical alerting dashboard designed for IT 
service desk users. The solution has more 
than 60 graphical charts with drill-down 
capabilities for accessing information. It 
also includes ITIL compliance, automatic 
installation for quick deployment time, and 
security and personalization options such as 
individual secuiity and layout settings. 

■ Datawatch Monarch Data Pump v10.5 
Professional Edition 

Datawatch announced Datawatch Mon- 
arch Data Pump vlO.5 Professional Edition, 
its server-based data distribution, ETL 
(extraction, transformation, loading), and 
application integration solution. Features 
include the ability to install up to 32 physi- 
cal CPUs, remote administration over the 
network, the ability to use the Web-enabled 
Monarch Data Pump administration over 
any browser, and integration with SQL. 

■ HP ProBook 

HP unveiled its latest family of notebooks 
for corporate and small to midsized enter- 
prises. HP's latest notebooks include the HP 
ProBook 6455b/6555b series; 6450b/6550b 
series; 4325s/4425s/4525s series; and the 
HP 425 and 625, which start at $779, $859, 
$619, and $549, respectively. All models 
will be available starting in June. 

■ Kofax Front Office Server 3.0 

Kofax introduced the latest version of its 
Kofax Front Office Server, which lets 
users capture forms and documents 
through multifunction peripherals, scan- 
ners, and other devices. Kofax Front Office 
Server 3.0 supports better integration with 
Kofax Capture and Kofax Transformation 
Modules and works with Kofax' s existing 
enterprise-level infrastructure. 

■ Lumigent Technologies AppGRC 
For Lawson S3 Enterprise 
Financial Management 

Lumigent Technologies announced 
AppGRC for Lawson S3 Enterprise 



Financial Management, an off-the-shelf 
controls monitoring solution for the 
Lawson financial suite. Designed to help 
reduce corporate risk, the solution func- 
tions as a financial compliance control sys- 
tem and features automated data baselining 
and continuous monitoring of key policies 
and controls. The AppGRC is preconfig- 
ured to monitor critical application data. 

■ Netlist HyperCloud 

Netlist announced HyperCloud, a low- 
voltage and high-density (1.35V) virtual 
rank memory module. It offers up to 384GB 
of DRAM in a single socket server, and it 
supports up to 19% in memory power sav- 
ings compared to traditional 1.5V products. 
HyperCloud features low latency and sup- 
ports three DIMMs per channel. 

■ OKI Printing Solutions MC560 MFP Plus 

OKI Printing Solutions released the 
MC560 MFP Plus, a four-in-one print- 
er, copier, scanner, and fax machine. 
Equipped with HD Color Technology, the 
MC560 MFP Plus produces vivid print 
and copy quality. It features analog fax 
capabilities, PC faxing, fax forwarding, 
and 400-sheet paper capacity. The MC560 
MFP Plus base unit costs $999. 



Messaging & Telephony 



■ ArcMail Technology 4.0 

ArcMail Technology announced the 
release of version 4.0 of the company's 
email archiving appliance. The appliance 
offers improved indexing methods, mak- 
ing searches about 30% faster than in pre- 
vious versions. The revision allows single 
sign-on and features a Web 2.0-style user 
interface that has the feel of a desktop 
mail reading application, providing richer 
functionality and more features. 

■ Barracuda Networks Message Archiver 

Barracuda Networks announced the lat- 
est features for the Barracuda Message 
Archiver that allow users to archive cal- 
endar items, contacts, and tasks from 
Microsoft Exchange. The new capabilities 
complement the Barracuda Message 
Archiver' s Exchange stubbing feature, 
which helps administrators minimize a 
user' s Exchange storage footprint by mov- 
ing email attachments from the Exchange 
server to the Message Archiver. 

■ Cisco Video-Enabled Teaching 
& Learning Solution 

Cisco announced its Video-Enabled 
Teaching And Learning Solution, which is 
designed to increase student performance. 
It integrates the Cisco Media Experience 
Engine 3500, a media processing device 
that lets teachers and students share vid- 
eos across many devices, and Cisco Show 
and Share, a social video system that 
helps schools create secure video shar- 
ing communities. 

■ Mimecast Continuity Services 

For The BlackBerry Wireless Solution 

Mimecast introduced Mimecast Con- 
tinuity Services for the BlackBerry Wire- 
less Solution. The services will help IT 
personnel deliver uninterrupted email 
access to BlackBerry users if there is a 
Microsoft Exchange outage, BlackBerry 
Enterprise Server failure, or Research In 
Motion infrastructure downtime. In the 
event of an outage, users will be able to 
send, receive, and delete emails as usual. 



■ Nortel, Application Solutions UC 
Collaboration Application 

Nortel and Application Solutions have 
partnered to advance business collabora- 
tion services with the release of the UC 
collaboration application for the Hosted 
IP Communications Solution. Users can 
shift from conference calls to Web collab- 
oration in real time. Features include 
application sharing, document presenta- 
tion, interactive whiteboards, private chat, 
polling, surveying, desktop sharing, and 
synchronized Web browsing. 



Networking & VPN 



■ Aruba Networks Application 
Fingerprinting Technology 

Aruba Networks announced that its 
application fingerprinting technology now 
offers optimized voice over Wi-Fi calling 
with the BlackBerry Mobile Voice System 
5. The technology recognizes latency- 
sensitive voice application traffic and 
conditions the Wi-Fi network to make a 
reliable connection. Application finger- 
printing ensures reliable and timely deliv- 
ery through Aruba' s Adaptive Radio Man- 
agement technology. 

■ ATS Group Galileo Performance Explorer 

The ATS Group released an updated 
version of Galileo Performance Explorer, 
a SaaS performance management tool 
for IBM's AIX platform. Two key fea- 
tures in the release include Virtual 
Frames, which let users virtually com- 
bine LPARs on selected frames to 
view "what if?" scenarios and optimize 
server resources, and Aliases, which let 
users assign familiar names to servers 
and LPARs. 

■ Black Box TS5000A 

Black Box released its TS5000A LAN 
Solution GB Network Tester that combines 
a high-end cable tester with an easy-to-use 
Gigabit network tester. The TS5000A 
detects and reports speed, duplex mode, 
wiring mode, and polarity of transmit pair 
for active Ethernet and other devices up to 
1GB. It also provides complete cable test- 
ing functions. 

■ BLADE Network Technologies 
VM ready Ethernet Switches 

BLADE Network Technologies an- 
nounced additional capabilities for its 
VMready-capable Ethernet switches. The 
switches are now able to manage thou- 
sands of virtual machines across massively 
scalable data center networks and feature 
NMotion, which is a technology that 
detects VM migrations as they occur. 
NMotion always enables the VMready 
switches to work across all vSphere 
license levels and works on physical 
switches without proprietary packet tag- 
ging. Other features include the ability to 
work with VMware vCenter Server, 
Microsoft Hyper-V, Citrix XenServer, 
Linux KVM, and Oracle VM. 

■ Citrix NetScaler MPX Appliances 

Citrix Systems announced the Net- 
Scaler MPX 17500, 19500, and 21500 
appliances, which take advantage of Intel 
Xeon processor 5680 series technology 
and utilize Citrix nCore technology for 
improved scalability, functionality, and 
performance. The NetScaler MPX 17500, 
MPX 19500, and MPX 21500 appliances 
start at $140,000. 



■ Citrix NetScaler VPX Virtual Appliance 

Citrix Systems released its 3Gbps 
NetScaler VPX virtual appliance, which is 
capable of a threefold performance boost 
compared to the previous version, which 
translates to cloud-level scalability and 
better application delivery infrastructure. 
NetScaler VPX also supports up to 
15Gbps with Intel Ethernet SR-IOV tech- 
nology. NetScaler VPX-3000 (3Gbps) will 
be available in Q2 2010. 

■ Dynamic Network Services API 2 

Dynamic Network Services announced 
the release of API 2 that offers enhanced 
features to help customers automate DNS 
changes to the database via API scripts. It 
also allows you to simplify DNS integra- 
tion and incorporate the Dynect Platform' s 
advanced features into the services provid- 
ed to end users. 

■ Extensis Portfolio 8.5 (v8.5.5) Update 

Extensis released a free update (v8.5.5) 
for its Portfolio 8.5, the company's sin- 
gle-user digital-asset management soft- 
ware. The recommended update includes 
camera raw filter support for the most 
popular camera models now available; 
full DNG workflow support, which 
keeps color adjustments and allows 
for XMP metadata embedding; and 
several performance- and stability- 
related improvements. 

■ Extreme Networks VIM3-40G4X 

Extreme Networks announced the 
VIM3-40G4X, which is a scalable 40GbE 
network module that adds four 40GbE 
connections to the Summit X650 Top-of- 
Rack stackable switches. The module is 
fully compatible with the existing Sum- 
mit X650 and Summit X480 stackable 
switches to preserve customers' invest- 
ments while providing the ability to 
increase scalability. 

■ Gale Technologies GaleForce 

Gale Technologies released GaleForce, 
an end-to-end resource orchestration 
software platform. GaleForce automates 
the orchestration life cycle so organiza- 
tions can efficiently utilize physical and 
virtual resources for labs, data centers, 
and cloud environments. It is designed 
for enterprises, service providers, net- 
work equipment manufacturers, and 
software vendors. 

■ Hemoco Lansweeper 4.0 

Hemoco released Lansweeper 4.0, a sys- 
tem that will do a complete inventory of 
your Windows network without the need 
to install an agent on individual worksta- 
tions or servers. Administrators can man- 
age all network assets using an intuitive 
Web interface, which also lets them define 
custom reports, actions, and scripts. 

■ HyTrust Appliance Version 2.0 

HyTrust released Appliance Version 
2.0 specifically for enterprises that are 
wanting to maximize ROI in virtualiza- 
tion areas but are operating with a limited 
"virtual footprint" due to lack of visibility 
and control. With Version 2.0, enterprises 
gain virtualization access, compliance, 
and accountability control features, plus 
improved performance and such new fea- 
tures as Policy Federation (automated pol- 
icy and template replication across 
HyTrust appliances), Full-Index Search, 
and a Root Password Vault (locks down 
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privileged host accounts and generates 
temporary passwords for time-limited 
account access). The release comes in 
three editions: Community (full-featured 
download supporting three hosts), Stan- 
dard (supports unlimited hosts), and 
Enterprise (supports unlimited hosts). 

■ Napatech Traffic Generation, 
Capture & Replay 

Napatech released two feature sets 
focused on Traffic Generation and Capture 
& Replay applications. The release coin- 
cides with Napatech's NT20E2 2x10 Gbps 
PCI-E Gen 2 In-line and Capture network 
adapters. Napatech's current 4-port IG 
and 2-port lOG products also support the 
feature sets, which include full line-rate 
20Gbps Ethernet traffic generation and 
full throughput lOGbps capture and analy- 
sis per port. 

■ Net Optics Indigo PRO 
Management Platform 

Net Optics launched its Indigo PRO 
Management Platform, which lets users 
monitor and control hundreds of Net 
Optics devices across the local and dis- 
tributed network. The offering is built 
around the Indigo Manager Pro and 
Indigo Collector Pro appliances, which 
provide a single interface through which 
users can access comprehensive Net 
Optics device management functions and 
view statistical network traffic data. Users 
can also view reports that update in real 
time. The Net Optics Indigo PRO Man- 
agement Platform will be available by the 
end of July, starting at $18,900 based on 
the number of nodes. 

■ nexTier Networks 
Compliance Enforcer 3.0 

nexTier Networks announced Compli- 
ance Enforcer 3.0. It uses nexTier's DLP 
algorithms with semantic analysis to offer 
auto-classification features, multitier 
workflow customization, and monitoring 
capabilities for Web 2.0 applications. The 
solution lets users create and modify 
out-of-the-box ontology so that it can be 
tailored to the enterprise's needs. Com- 
pliance Enforcer starts at $30,000 for a 
100-user license. 

■ ScienceLogic EM7 G3 Integration Server 

ScienceLogic announced the release of 
its EM7 G3 Integration Server, designed 
specifically to be used by enterprises that 
want to customize and automate the man- 
agement and monitoring of their private 
and hybrid cloud environments. The EM7 
G3 offers a secure and easy-to-use Web- 
based interface and combines REST-based 
API design. The EM7 G3 Integration 
Server is best for enterprises looking to 
integrate with a private cloud self-service 
portal, automate the monitoring of virtual 
machines, and standardize their monitor- 
ing policies for IT resources. The EM7 G3 
is also ideal for custom chargeback and 
IT allocation. 

■ VersaReports Universal Report Server v1.3 

VersaReports released version 1.3 of 
Universal Report Server. Upgrades in- 
clude on-demand scheduling of reports, 
improved report distribution, and report 
management. It integrates with user report 
archives and notifies users of failed or 
completed reports via email or Twitter. 
On-demand forwarding moves reports to 
other users, distributions lists, email 
accounts, or remote servers. 

■ Voice Print International 
VPI PERFORMANCE 

Voice Print International released its VPI 
PERFORMANCE software, a real-time 



reporting and performance management 
solution. It consolidates data into key per- 
formance indicators for use in drill- 
through reports, scorecards, and ticker-like 
desktop displays. VPI says the solution 
gives enterprises real-time information to 
help optimize operational performance, 
service quality, and risk management. 



Physical Infrastructure 



■ Aten CL5800N 

Aten announced the CL5800N, a PS/2/ 
USB console with a 19-inch LCD that 
features a dual-rail lU housing. The 
CL5800N works with Aten KVM switches 
and maximizes space in the data center. It 
also offers DDC emulation, so server 
video settings will automatically adjust. 
The CL5800N starts at $1,549.95. 

■ Certified Energy Consultants AircoSaver 

Certified Energy Consultants announced 
the AircoSaver, which uses sensor-driven 
algorithms to control compressor run 
times, lowering energy costs and extend- 
ing compressor life. According to the 
company, about half of electricity costs 
are from air conditioning, but the 
AircoSaver, installed by a licensed HVAC 
technician, can reduce A/C-derived costs 
some 20 to 30%. 

■ Fike Impulse 

Fike introduced the Impulse valve for 
DuPont FM-200 and FE-25 clean agent 
fire suppression systems. The Impulse 
valve opens a rupture disc to discharge the 
agent using an electrically actuated mech- 
anism rather than a gas cartridge actuator. 
It comes in a 1-inch version for containers 
up to 100 pounds or a 3 -inch version for 
containers more than 100 pounds. 

■ Siemon Quick Mounting Twist-Lock 
Cable Managers 

Siemon announced its D-ring cable 
managers molded of impact-resistant 
polycarbonate. A single quarter-turn 
secures the cable managers, which are 
compatible with standard 9.5mm square 
mounting cutouts common to EIA/CEA 
industry- standard cabinets and racks. The 
devices provide a highly flexible cable 
management option for planned deploy- 
ments as well as unplanned moves, addi- 
tions, and changes. 

■ Staco Energy Products StacoSine 

Staco Energy Products announced Staco- 
Sine active harmonic filters, an open-chas- 
sis line of products designed to integrate 
with the final equipment configurations of 
OEMs, system integrators, and panel 
builders. The filter can be mounted in a 
20-inch-deep enclosure and dynamically 
cancels problematic harmonics from the 
3rd to the 51st order, which helps to effi- 
ciently deliver electricity. 



Security 



■ Activldentity BlackBerry PKI 

Activldentity announced a solution that 
offers PKI (public key infrastructure) and 
PIPS (Federal Information Processing 
Standard) credentials on the BlackBerry 
using a microSD card. The solution enables 
users to sign secure emails digitally or pro- 
vide a two-factor authentication when they 
remotely access a protected network. 

■ BeyondTrust PowerBroker 
For Virtual ization 

BeyondTrust released PowerBroker 
For Virtualization, a unified solution that 
centrally addresses risks related to 
undermanaged privileges in virtualized 
data center settings. Beyond providing a 



cost-effective path to enlist consistent 
granular privilege identity management 
across guest OSes and hypervisor hosts 
via one centralized management console, 
the software lessens privileged-access 
security risks, ensures compliance, and 
helps organizations move to a virtualiza- 
tion platform. 

■ Codenomicon Penetration Testing Toolkit 

Codenomicon unveiled its automated 
penetration testing toolkit, which is 
designed to help security personnel root 
out the obvious flaws as well as the more 
difficult- to- discover vulnerabilities. 
Codenomicon' s toolkit includes Defensics 
fuzzers, XML fuzzers, Defensics Traf- 
fic Capture, and the Codenomicon Net- 
work Analyzer. 

■ Check Point Software Technologies UTM-1 
Edge N & Safe§Office N 

Check Point Software Technologies 
announced the UTM-1 Edge N and 
Safe@Office N appliances, which are 
designed to offer gigabit firewall perfor- 
mance starting at $750. Features include 
enterprise-class security, intrusion preven- 
tion, antivirus, antispam, Web filtering, 
and remote access connectivity. Users will 
be able to centrally manage thousands of 
remote sites from a single console. 

■ Cyber-Ark Software Privileged Identity 
Management Suite 6 

Cyber-Ark Software released version 6 
of its PIM (Privileged Identity Manage- 
ment) Suite, which includes a new On- 
Demand Privileges Manager product. 
Version 6 helps global organizations bene- 
fit from uniformly managed security 
policies, compliance, reporting, and 
administration for all privileged users and 
accounts from a common user interface. 

■ e-DMZ Security TPAM Suite 2.3 

With version 2.3 of its TPAM Suite, e- 
DMZ says it's offering users the indus- 
try's first real-time session monitoring and 
auditing abilities to enhance users' ability 
to manage complete privilege/access via 
real-time session shadowing and actions 
guarding against malicious and accidental 
occurrences. The release also offers better 
configuration management database inte- 
gration, enhanced support of widely 
distributed architectures, and enhanced 
GUI features. 

■ Encryptx Defender Collection 

Encryptx announced the Defender Col- 
lection, a portfolio of products designed to 
protect information stored on hard drives 
and optical media. Defender provides 
strong encryption and includes flash drives, 
hard drives, optical storage, and software to 
prevent unauthorized access. Encryptx has 
a full range of solutions aimed at industries 
such as medical and banking, where securi- 
ty is paramount. 

■ M86 Security WebMarshal 6.5.6 

M86 Security announced a new version 
of its secure Web gateway solution, M86 
WebMarshal 6.5.6. This version supports 
Windows 7, Windows Server 2008 R2, 
and Windows Small Business Server 
2008, and it can be integrated as an ISA 
plug-in. It also has improved content fil- 
tering and reporting and offers easier man- 
agement of rule sets. 

■ Newton Security T-DAR 

Newton Security's T-DAR (Tailgating 
and Piggybacking Detection/Prevention) 
system features 3D stereo machine vision 
that offers improved security compared to 
pass and badge systems. T-DAR detects the 
number of people passing through an 




entrance or exit and can prevent unautho- 
rized invidivuals from slipping through a 
doorway behind authorized personnel. 
When T-DAR does detect more than one 
person entering, it delivers real-time alarm 
activation and sends event camera playback 
to central security. T-DAR differentiates 
between people and carts, parcels, or other 
objects. T-DAR can be combined with other 
restrictive devices, such as automatic immi- 
gration gates, security revolving doors, por- 
tals, and mantrap systems. For more on this 
product, see page 29. 

■ Norman Data Defense Systems 
Norman Network Protection 3.7 

Norman Data Defense Systems released 
Norman Network Protection 3.7, its anti- 
malware gateway that provides real-time, 
front-end security for LAN and production 
environments. This protection suite 
combines Norman SandBox and DNA 
Matching technology to detect multi- 
ple threat protocols. NPP runs on Linux 
and is available as a software or anti- 
malware appliance. 

■ 01 ORadar High Availability 

Ql introduced the QRadar High Avail- 
ability appliance for SIEM solutions. 
QRadar HA fully integrates with the 1605 
Event Processor appliance, which holds 
6TB of local storage. Other features include 
automated failover between primary and 
HA appliances; built-in desk synchroniza- 
tion for replicating configuration, logs, and 
flows; and plug-and-play configuration. 
QRadar HA starts at $24,000. 

■ Ouest Software ChangeAuditor 

Quest Software announced the update of 
its ChangeAuditor real-time change solu- 
tion. ChangeAuditor, which is designed to 
deliver increased security and compliance 
controls for Active Directory, Exchange, 
and Windows File Servers, now features 
role-based access, object protection, and 
event logging. The new features are 
designed to help administrators meet 
external and internal security regulations. 

■ Red Condor 7.1 

Red Condor released version 7.1 of its 
antispam software. The product, which 
powers the company's email security 
appliances and hosted spam filtering ser- 
vice, includes a new scam filter aimed at 
specific scams, such as the "Nigerian 419" 
scam. It also offers image-filtering tools 
that detect image-based spam. 

■ Shavlik Technologies NetChk Protect 7.5 

Shavlik Technologies announced the 
release of Shavlik NetChk Protect 7.5, a 
patch, antivirus, and power management 
solution. NetChk Protect 7.5 integrates 
scheduled changes to a computer's power 
state, such as sleep, hibernate, and shut- 
down, with Wake on LAN to power 
machines on for regular maintenance and 
patch updates. 

■ Specops Software Password Reset 
& Password Policy 

Specops Software announced upgrades 
for its password management products 
Go to Page 6 
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Continued from Page 5 
Password Reset and Password Policy. The 
new versions include real-time reporting 
and monitoring of system activity, as well 
as email notifications that alert users 
when passwords are about to expire. The 
new version will also enroll users' 
mobile numbers for mobile verification 
code authentication. 

■ Trend Micro PortalProtect 2.0 

Trend Micro released its PortalProtect 
2.0, which supports the Microsoft Share- 
Point 2010 platform. Version 2.0 is 
strengthened with Web threat protection 
and data loss prevention. PortalProtect 2.0 
is backed by the Trend Micro Smart 
Protection Network infrastructure, which 
scans, filters, and correlates more than 20 
billion emails, Web sites, and files every 
day. From that data. Trend Micro can 
identify and respond to emerging threats. 
It adds advanced content filtering for file 
and Web content, helping to ensure that 
offensive material does not appear on 
SharePoint. The company says it includes 
prebuilt data loss prevention with easy-to- 
use templates that track PII (personal iden- 
tifiable information) that can creep into 
SharePoint sites. 

■ Webroot Vulnerability Scanning 

For Cloud-Based Web Security Service 

Webroot introduced a vulnerability 
scanner that's delivered in the cloud as 
part of its Webroot Web Security Service, 
which is Webroot' s SaaS model. The ser- 
vice offers weekly and monthly tests for 
more than 400 common vulnerabilities 
found in the operating system, Web 
browsers, browser plug-ins, Microsoft 
Office (and its components), media play- 
ers, and instant messaging software. 



Servers! 



■ HP Integrity Solutions 

HP announced the Integrity solutions 
portfolio of servers, software, and ser- 
vices, which is designed to enhance SLA 
performance, deliver better application 
availability, and make mission-critical 
applications simpler. The solutions are 
built on HP Blade Scale Architecture. HP 
also announced AllianceONE, a partner 
program designed to optimize solutions. 

■ SGI Altix ICE 8400 

SGI released the Altix ICE 8400, a high- 
performance blade platform that features 
Quad Data Rate InfiniBand interconnect, 
on-board Mellanox ConnectX-2 Infini- 
Band HCE configurations, and the Intel 
Xeon 5600 series. The lOU blade enclo- 
sures (16 compute blades per enclosure) 
support up to 128 processors per cabinet 
with support for 130W CPU sockets. 



Storage 



■ AlertSite DejaClick ScriptShare 

AlertSite announced the release of 
DejaClick ScriptShare, its free storage 
and sharing system for Firefox users. 
DejaClick ScriptShare lets users save, 
upload, and share any script they record 
with DejaClick. Users can store unlimited 
scripts on AlertSite servers and send them 
to multiple email addresses. The AlertSite 
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repository also stores free scripts for users 
on its secure server. The ScriptShare 
Dashboard gives administrators data about 
each script and the number of times it's 
been viewed. As an inside-the-browser 
Web monitoring system, DejaClick 
ScriptShare can capture a real-time view 
of page performance, including links, 
objects, and other rich-media applications. 

■ BLADE Network Technologies 
RackSwitch G8124 

BLADE Network Technologies an- 
nounced a CEE (Converged Enhanced 
Ethernet) top-of-rack switch called 
the RackSwitch G8124. Features in- 
clude lossless CEE enhancements with 
BLADEOS 6.3, high-performance IP 
storage, and FCoE (Fibre Channel over 
Ethernet). The switch broke the $500- 
per-lO-Gigabit Ethernet port barrier for a 
CEE-capable switch. 

■ CRU-DataPort ToughTech Secure Q 

CRU-DataPort unveiled a multi-inter- 
face drive enclosure that features improved 
data security with hardware-based and 
-accessible 128-bit AES encryption for the 
drives it hosts. Made to hold a 3.5-inch 
SATA drive, the $189 ToughTech Secure 
Q comes with two FireWire 800 jacks as 
well as eSATA and USB 2.0 ports. To 




access its data, simply insert one of the 
hardware dongle keys that come with the 
drive. Access is not permitted without a 
key, and each enclosure comes with three 
keys. Moreover, CRU-DataPort offers 
provisions for making stronger encryption 
keys, scheduled key changes, and other 
security policies that vary from organiza- 
tion to organization. 

■ Iomega StorCenter ix12-300r 
Network Storage Array 

Iomega released its Iomega StorCenter 
ixl2-300r Network Storage Array, which 
is a rackmount storage device ideally suit- 
ed to small and midsized enterprises and 
remote branch offices. The offering sup- 
ports up to 250 users and up to 24TB of 
networked storage in a 2U form factor. 
The unit will be available in June starting 
at $4,999.99 for the 4TB version. 

■ iStoragePro 8 Bay Tower Series 

iStoragePro announced its 8 Bay 
Tower Series, which is 30% smaller and 
lighter than the previous model but 
comes in SAS Expander and MiniSAS 
models. Ideal for enterprises of all sizes, 
the 8 Bay Tower Series supports up to 
16TB of storage capacity for a single 
unit, or up to 160TB of capacity with 10 
units connected. 

■ Kroll Ontrack Toolkit 

Kroll Ontrack improved its data-recov- 
ery offerings for flash and SSD-based 
drives in order to let Ontrack Data 
Recovery engineers give customers bet- 
ter success rates and faster data retrieval 
times while increasing the integrity of 
data recovered. Kroll Ontrack says better 



understanding and managing of flash 
and SSD features have significantly 
increased the Toolkit' s ability to sort file 
systems and manage data on drives, thus 
increasing the speed and quality of 
data recovery. 

■ Nimbus Data Systems 
Sustainable Storage 

Nimbus Data Systems introduced Sus- 
tainable Storage. The enterprise network 
storage solution offers up to 504 redun- 
dant NAND flash blades and the Nimbus 
HALO storage operating system. Accord- 
ing to Nimbus, it delivers 95% lower ener- 
gy costs, 24 times better I/O performance, 
and on-demand scalability to 100TB of 
solid-state storage. 

■ Paragon Software Group Hard Disk 
Manager 2010 Corporate Line 

Paragon Software Group introduced the 
Hard Disk Manager 2010 Corporate line, 
which includes Hard Disk Manager 
Workstation, Hard Disk Manager Server, 
and Hard Disk Manager Virtual Server. 
This product line offers IT professionals 
an all-in-one solution for full lifecycle 
disk maintenance operations in Windows. 

■ PHD Virtual Technologies PHD Virtual 
Backup For Citrix XenServer 

PHD Virtual Technologies released the 
PHD Virtual Backup for Citrix XenServer. 

# PHD Virtual' 

The backup and recovery product is 
purpose-built for the growing number of 
virtualized XenServer environments and is 
certified Citrix Ready. The product, which 
debuted at the Citrix Synergy conference 
in San Francisco, is flexible, scalable, and 
cost-efficient, partly because it uses the 
virtual appliance itself to perform back- 
ups. PHD Virtual Backup for Citrix 
XenServer offers speed and reliability — 
including source-side deduplication and 
support for both XenServer and Xen- 
Desktop. The product will be commercial- 
ly available in September. 

■ Pillar Data Systems Pillar Axiom 

Pillar Data Systems added features to its 
Pillar Axiom storage system that build on 
Pillar's QoS abilities and provide storage 
administrators greater flexibility and relia- 
bility. These features include AxiomOne 
Replication (native array-based data pro- 
tection for SAN and NAS), QoS within 
Storage Class (FC, SSD, SATA support- 
ed), AxiomOne Pre-emptive Copy (senses 
suspect drives in storage pool), and 
Application-Aware QoS Migration. 

■ ProStor InfiniVault With 1TB RDX 

ProStor Systems announced it is ship- 
ping its InfiniVault systems with 1TB 
(native) RDX removable backup disk car- 
tridge support. The company is targeting 
healthcare, video, archiving, and surveil- 
lance market segments with the release. 
ProStor expects RDX to continue to sur- 
pass the capacity of LTO tape media. 

■ QNAP TS-859U-RP Business Series 
Turbo NAS 

QNAP Systems announced an eight- 
drive NAS server that fits in a 2U rack. It's 
powered by a dual-core Intel Atom D510, 
and it's certified as VMware Ready. 
Features include dual power supplies with 
failover alert messaging, load balancing 
support, and twin Gigabit ports with a vari- 
ety of available bonding modes. 



■ Sans Digital EN850L+BXE 

Sans Digital introduced the EN850L 
H-BXE, an 8U, 50-bay rackmounted storage 
unit with up to 100TB of total storage 
capacity. The EN850LH-BXE supports both 
network sharing and direct attached con- 
nection. Supporting NAS and iSCSI, the 
unit increases storage capacity by providing 
50 hard drives in a single rackmount. 

■ SolarWinds SAN Monitor 

SolarWinds released SolarWinds SAN 
Monitor, a free tool designed to provide 
real-time critical storage performance met- 
rics from a desktop dashboard. By identi- 
fying performance bottlenecks, SAN 
Monitor offers the visibility IT profession- 
als need to avoid server and application 
performance problems. With SAN Mon- 
itor, you can monitor Dell, Sun, and IBM 
SAN storage subsystems, view storage 
operations and I/O latency, and organize 
LUNs by size from the busiest to those 
used the least. Additionally, storage infor- 
mation, such as array name, model, manu- 
facturer, serial number, firmware version, 
number of controllers, number of disks 
(allocated and spare), and total raw capaci- 
ty, can be recorded. 

■ Spectra Logic Spectra nTier700 

Spectra Logic unveiled the 120TB 
Spectra nTier700 disk appliance. The 
Spectra nTier700 can be configured with 
up to six storage blades, each containing 
10 drives. Blades can be added to the 
nTier700 appliance as capacity require- 
ments increase and can be configured with 
1TB or 2TB drives to grow in 10TB or 
20TB increments. 

■ StorServer Disaster Recovery Services 

StorServer announced it is offering sev- 
eral types of disaster recovery consulting 
services to assist customers with prepar- 
ing, testing, and responding rapidly to dis- 
aster situations. The services include 
planning and onsite support, onsite testing 
conducted once annually, and 24/7 year- 
round recovery first response assistance 
(24-hour response time guaranteed). The 
consulting services are available to new 
and existing customers. 
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HOTLOK 

From the makers of KDLDLOK 



Blanking Panels 



Save up to 29% in annual 
operating expenses. 



In an unsealed cabinet, 40% of the IT equipment 
intake air is damaging hot exhaust that has cir- 
culated from the back of the cabinet. HotLok® 
Blanking Panels provide superior sealing to pre- 
vent the circulation of hot exhaust air, resulting 
in significantly lower intake-air temperatures, 
energy efficiency improvements, and increased 
reliability and cooling capacity. 

• 99.97% Sealing Efficiency 

• Easy Snap-In Installation 

• Fast Return on Investment 



Before HotLok® Blanking Panels 



Now you can try HotLok for free! 

Visit upsite.com/ProcessorCoupon today for 
a free carton of HotLok Blanking Panels and 
experience the benefits of superior 
sealing performance. 



*All data and imases are from the Two- Dimensional Computational Fluid Dynamics Modeling 
Study available at upsite.com 



upsice 




After HotLok® Blanking Panels 




ENERGY 



upsite.com so/es 800.419.1707 emo77sales@upsite.com 



PARTNER 



technologies" 



HotLok® and KoldLok® products can be purchased from our fine distributor partners: 
upsite.com/HowToBuy 



Upsite is an ENERGY STAR Service 
and Product Provider Partner, 
developing ways to optimize data centers 
and improve energy efficiency. 
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Budget-Sawy Security 



Continued from Page 1 
is being taken seriously by all com- 
panies. "While security does not need to 
be the largest spend item (financial ser- 
vices typically spends 6% of its budget on 
security initiatives), security should cer- 
tainly take top priority in information- 
based companies," Brown says. 

Doing It Right 

The measure of your security budget 
success, according to Frank Cabri, vice 
president of marketing and business devel- 
opment at Centrify (www.centrify.com), is 
that your data center is never compro- 
mised. The second measure, he says, is the 
cost. Cabri says industry reports have IT 
security ranging from 7 to 20% of IT bud- 
gets, so it is clearly possible to be heavily 
invested in security. 

Cabri says various government and 
industry regulations describe outcomes 



and the best practices appropriate to 
achieve those outcomes, and the silver 
lining is that meeting those requirements 
will take you a long way toward securing 
your data center. "Factoring in these 
regulations as you make security in- 
vestment decisions will save you from 
making redundant investments," Cabri 
says. "Vendors can also provide insights 
for you, and you can reasonably require 
them to provide you with sufficient 
reporting so that you know that their solu- 
tion is doing what you expect and meets 
the security policies and standards that 
you have set." 

Pao points out that when making invest- 
ments, you should ensure that you have an 
opportunity to evaluate products or ser- 
vices. "Many vendors offer an evaluation 
period to give customers an opportunity 
to try a solution in their network and 
make sure that it solves the problem," he 



explains, adding that some companies 
include logs and reports to show that 
money was well spent. 

Room For Improvement 

Have you done a threat analysis to iden- 
tify your risks? Cabri says there are 
known categories of threats and estab- 
lished ways to stop them. "Make the 
assessment, and based on your discover- 
ies, you can set the priorities. Generally, 
more has been done to keep the bad stuff 
out. Clearly, this is important," he says. 
"Some of the biggest improvements can 
be made by protecting against insider 
threats — intentional or unintentional 
attacks on critical systems from within." 
Cabri says it's also important to review 
policies. "Are you following best prac- 
tices for password attributes and resets? 
Forty percent of organizations share root 
passwords. Are you allowing shared and 
anonymous access to key systems?" 

If you answer yes to these questions, 
Cabri says that can invite malicious 
behavior, as people know they are doing 
things anonymously. "People are people, 
not IP addresses or root passwords," he 
says. "Require them to log in as them- 
selves and demand accountability. Are 
you able to audit privileged users and then 
use the audits to help diagnose vulnerabil- 
ities? All data is not created equal. Is 
some of your data overprotected? Have 
you layered on more security than you 
need for certain systems, users, and class- 
es of information?" 



Money Well Spent 

So how can data center and IT managers 
make sure they're getting the most bang 
for their bucks? "If nothing goes 'bang,' 
they are certainly doing something right," 
says Brown. "Continual assessment of the 
security practices, in line with the chang- 
ing business environment and compliance 
regulations, is vital. Employees change 
roles or leave organizations altogether. 
Are their access rights being changed or 
revoked in line with these changes? Are 
passwords changed regularly on systems 
or network devices?" 

Brown says a static approach to security 
is not viable. Organizations must maintain 
continual vigilance to manage and mini- 
mize the risks to the business. "Even the 
largest budgets will not address unrecog- 
nized security weaknesses," he says. 

"At any rate, it all comes down to the 
value of the data and what it would cost if 
a security breach compromised it," Brown 
continues. "Security is an ongoing pro- 
cess, not a product or series of products to 
check off the list. The costs associated 
with remediating a security breach can far 
outweigh the cost of buying and imple- 
menting physical hardware or software 
solutions, and depending on the industry, 
regulatory fines can be significant." 

Brown says it's important to assess the 
risks, observe others, seek balance, under- 
stand what processes are in place today to 
protect systems and data, and work to 
define and track security metrics. 



Top Tip: Guard The Path Of Least Resistance 

According to Terry Brown, director of marl<eting for Irdeto's Cloal<ware Enterprise division 
(www.irdeto.com/cloal<ware), attacl<ers will always seek the easiest path. 'The more successful 
your company, the more attacks you should expect," he says. "If you are thwarting the attacks, 
you're doing well. However, not all security attacks come from outsiders trying to get in. 
Consider the potential of a breach from someone within the organization. Are some systems 
more critical? Assess the potential impact and cost of inadequate control or process and make it 
a priority." After all, the easiest way to access a company's data is from the inside. 



Security Strategies 

For Deperimeterized Networks 



Continued from Page 1 
not be in my data center." Combined, these 
two phenomena create a security nightmare. 

Gillis, writing in his new book "Se- 
curing the Borderless Network," iden- 
tifies two other trends disrupting the 
enterprise security model: an online cul- 
ture among younger employees that 
mixes their business and personal lives, 
and a business environment that requires 
network access not only for employees 
but also contractors, vendors, and service 
providers. "All these new trends are 
leading to more people accessing more 
data residing at more places on the 
Internet from more types of devices than 
ever before." 

Develop A New Security Architecture 

Deperimeterized networks not only 
require different security architectures 
but also new doctrines, according to 
Simmonds. "The critical shift in thinking 
is that network security is irrelevant," he 
says, hastening to add that security is still 
important but must focus on protecting 
applications, services, and data — not the 
network per se. One of the earliest predic- 
tions of this shift from network to data 
security came from Microsoft Security 
Architect Dan Hitchcock. From a 2005 
document titled "The Evolution of 
Information Security Technologies," he 
concluded, "We are moving from what 
we may term an 'Age of Network Secur- 
ity,' wherein the network dominates the 
control landscape, to an 'Age of Host Se- 
curity,' in which the host provides the 
highest-utility security controls. Finally is 
the 'Age of Data Security' — the 'age' in 
which data controls have matured ade- 
quately to provide the highest utility of 
the three control types." 

As application security becomes more 
granular and focused on users and data. 



Cisco believes it will pervade virtually 
every element of the network, where many 
network devices, not just firewalls, can act 
as security checkpoints — in a sense, security 
moved to the cloud. Gillis says thick end- 
point security suites designed for PCs could 
be replaced by thinner "shims," or what he 
terms "intelligent NICs," that rely on cloud- 
based resources. These "client connection 
managers" recognize and auto-adapt to dif- 
ferent network conditions — for example, 
automatically connecting to a VPN when on 
an external network, such as an airport's 
Wi-Fi, vs. directly attaching when in the 
corporate offices. 

Burton analyst Eric Maiwald agrees that 
IT must shift its security strategy from 
reliance on specific technologies to policies 
designed to protect sensitive, confidential 
information. "Think about what's important 



Key Points 



• Deperimeterized, or borderless, networks 
are the inevitable result of several mega- 
trends: employee mobility and use of 
non-PC mobile devices to access enter- 
prise apps and data, employees' mixture 
of work and personal network usage, and 
IT'S increased reliance on cloud-based 
SaaS applications. 

• These changes are rendering obsolete tra- 
ditional "moat-and-castle" network security 
designs, which segment enterprise and 
public networks, protecting the former from 
the latter. 

• IT'S security strategy must shift from 
defending networks to protecting devices, 
applications, and data. This mindset 
assumes networks are not secure, relying 
instead on widespread use of secure 
transport protocols, data encryption, and 
user and device authentication. 



about your information from a business per- 
spective," he says, and then design methods 
of protection for the various scenarios 
in which the information is used. The fun- 
damental maxim, says Simmonds, is that 
sensitive data must be protected when in 
transit, using secure network protocols, and 
at rest, using encryption — a prescription that 
isn't as hard as it seems, because Simmonds 
notes secure network protocols and data 
encryption are widely available. 

As network defenses become less valu- 
able, user and device authentication as- 
sumes greater importance. Simmonds posits 
a simple rule: Authenticate whenever possi- 
ble. Yet as users increasingly rely upon 
SaaS applications, maintaining a consistent 
set of credentials is challenging. The solu- 
tion is so-called federated authentication, 
products that integrate an online service's 
user credentials with users and groups 
defined in an enterprise directory, in essence 
providing single sign-on for SaaS. 

Policy Changes 

Securing deperimeterized networks isn't 
just a technological problem; employees 
also are responsible for protecting them- 
selves in a mobile environment in which 
business and personal activities are en- 
twined. Although most enterprises already 
have acceptable use policies, Gillis says 
these may not translate to today's Web 2.0 
world, often overly restrictive to the point of 
being unenforceable. Likewise, deperime- 
terized networks underscore the necessity of 
employee security training. "I'm sure that 
user education is the cheapest bang for the 
buck in IT security," Simmonds says. 

The blurring of employees' business and 
personal lives, their increasing mobility 
fostered by new smartphones and tablets, 
and the explosion in IT's reliance on 
external cloud-based services are all oblit- 
erating the distinction between corporate 
intranets and the global Internet — every- 
thing is just "the 'Net." These changes are 
having major ramifications for IT security 
architectures, but more importantly, 
according to Maiwald, mean "security 
requirements must become part and parcel 
of the way we build new systems." 



Why Perimeter-Based 
Security Is Outdated 

Perimeter-based 
security assumes: 

• Assets are held within a perimeter 

• Users must enter the perimeter 
to access the assets 

• The perimeter is guarded by a gatehouse 
(for example, a firewall) 

• The gatehouse has a list of the people 
with access 

• Employees are the good guys; 
everyone else must be kept out 

• Changes to the perimeter, the gatehouse, 
or the employees are rare 

• The workers go into the factory 
once per day 

Modern business 

trends breaking the model: 

• User Mobility 

- Users aren't in a perimeter 

• Business Agility 

- Physical and organizational perimeters 
aren't stable; business processes 
change constantly 

• SaaS & Cloud Computing 

- Assets aren't in a perimeter 

What you forget when you 
think in terms of perimeter: 

• Laptops outside of the office; 

new devices (iPhone, USB keys, etc.) 

• Guests in your office 

• Social networking activities 

• Cooperation (IM, email) 

• Software as a service 

• Cloud computing 

Source: "Jericho — An Alternative Approach To Security"; 
Slidedeck by Bjorn Gronouist, GSO Capgemini; 14th Jericho 
Forum Architecture Symposium; November 2009. 
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DS-RPC Remote Site Management Series 




Device Management 

Console Port Management 

Remote Power Control 

True RMS Voltage/Current 

SNMP Support 

HTTP Power Control 

SSHV2/SSL Secure Access 

RADIUS Authentication 

Direct TCP Port Access 

Telnet/SSH Menu Device Selection 

Device Port Naming 

Individual Port Password Assignment 



BayTech's DS-RPC Remote Management Series provides secure and 
reliable management for your network, servers, and console ports. 
The DS-RPC combines the powerful combination of power manage- 
ment and console access. The cost-effective DS-RPC Series is meant 
for single connection applications. Security features such as SSH v2. 



RADIUS authentication, SNMP and user access lists per port allow 
system administrators to remotely manage the DS Series with greater 
confidence and control. The selected host module provides either 
secure in-band or dial-up out-of-band access to your DS-RPC Series 
remote management solution. 



Bay Technical Assoc. Inc. 5239 A Avenue Long Beach, MS 39560 Tel: 228-563-7334 Fax: 228-563-7335 sales@baytech.net 



How Do You Measure the Energy 
Efficiency of Your Data Center? 
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Sentry Power Manager 

> Enterprise Cabinet Power IVlngt. 

> Reports & Trends 

> Device Monitoring 

> Groups & Clusters 

> Kilowatt Readings for Billing 

> Auto-Discovery of Sentry CDUs 

> Alarms 




PRIMARY ETHERNET 



WEB BASED CDU INTERFACE 




Sentry: POPS Switched CDU 

With Device Monitoring 

> Rack Level Power Management 

> Outlet Power Monitoring (POPS) 

> Input Power Monitoring 

> Environmental Monitoring 

> Outlet Groups 

> Alarms 



ith Sentry Power Manager™ (SPM) 
entry POPS™ (Per Outlet Power Sensi 
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Solutions for the Data Center 
Equipment Cabinet 



Server Technology 

tf 1.800.835.1515 www.servertech.com 
tel 1.775.284.2000 sales(a)servertech.com 



PDUo I Cables 

connect with us 

5401 Smetana Drive Minnetonka, MN 55343 
P: 866.631.4238 F: 800.336.2801 www.pducables.com 



PDU Cables is the leading manufacturer of UL listed 
power cable assemblies since 1981 and is the sole 
supplier of the Air Guard Cables Seal product line. 

Experience why thousands of data center professionals 
have made PDU Cables their choice. 
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For more Upcoming IT Events, see page 3. 



AITP Washington D.C. 

June 10, 6:30 p.m. 

Alfio's Restaurant 

4515 Willard Ave. 

Chevy Chase, Md. 
aitpwashdc.ning.com 



ISSA Northeast Ohio 
June 10 

Cuyahoga County Library-Parma South 
7335 Ridge Road 

Parma, Ohio 
www.neoissa.org 



SOL Server Society of Las Vegas 
June 10 

The Learning Center of Las Vegas 
777 North Rainbow 
Las Vegas, Nev. 
sssolv.com 



AITP Pittsburgh 
June 14 
Sloval< Catholic Sokol 
205 Madison St. Road 
Venetia, Pa. 
www.aitp-pgh.org 
AITP's Association Outstanding Ctiapter 
Award Winner 



Gartner IT Infrastructure, Operations & 
Management Summit 
June 14-16 
JW Marriott Grand Lake 
Orlando, Fla. 
www.gartner.com/technology/summits 
/na/it-operations/index.jsp 



AITP Southwest Missouri 
June 15 
Springfield, Mo. 
aitpspringfield.org 



Green Data Center Conference 
June 15-17 

San Diego Super Computer Center at University 
of California San Diego 
San Diego, Calif. 
www.greendatacenterconference.com 



ISSA St. Louis Chapter 
June 15 
St. Louis, Mo. 
stl.issa.org 



Oklahoma City AITP Chapter 
June 15 
Oklahoma City, Okla. 
www.aitp.org/organization/chapters 
/chapterhome.jsp?chapter=40 

AITP Atlanta 
June 17, 5:30 p.m. 
Crowne Plaza Atlanta Perimeter NW 
6345 Powers Ferry Road NW 
Atlanta, Ga. 
www.aitpatlanta.org 



AITP Omaha 

June 17 
Omaha, Neb. 
www.aitpomaha.com 

AITP Long Island 
June 18 
www.aitp-li.org 



ISSA Upstate South Carolina 
June 18 
NuVox 

301 N. Main St., Suite 5000 
Greensville, S.C. 
www.upstate-issa.org 



AFCOM Central Ohio 
June 19 
Columbus, Ohio 
www.afcomcentralohio.org 



AITP California Southland 

June 23 
www.aitpcalsouthland.org 



ISSA Baltimore 
June 23, 4:30 p.m. 
Sparta Inc. 
71 10 Samuel Morse Drive, Suite 200 
Columbia, Md. 
www.issa-balt.org 



AFCOM Central Texas 
June 24 
Austin, Texas 
www.afcom.com/afcomnew 
/CentralTexas.HTML 
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Storage Budget Strategy 

Develop A Better Approach To Reining In Expanding Storage Needs 
Without Draining Your Coffers 



by Christian Perry 

Talk about fighting a tough battle. As 
data center managers continue to seek ways 
to work within increasingly shrinking bud- 
gets, the data entering their environments 
continues to expand. Short of closing up 
shop altogether, there's no way to stop that 
data from pouring into the data center, 
regardless of the storage budget's size. 

"Most data center managers consider 
storage to be their most critical asset," 
says Mike Smith, vice presi- 
dent of product marketing at 
Solarflare Communications . — 
(www.solarflare.com). "In 
many cases, the business 
runs on data, so protecting it 
and making sure users have 
access to it is almost always 
a top priority. As a result, 
data center managers are 
very conservative with stor- 
age relative to other areas of 
the data center. At the same 
time, performance and cost 
effectiveness can provide 
competitive advantages, so 
these can't be ignored." 



total cost of ownership — and not simply the 
[dollars per terabyte] — for storage tiers and 
analyzing work patterns, they can focus 
their storage dollars where they make the 
most sense for the business." 

However, managers should still be cau- 
tious when considering the move to a 
new technology. Kelly Lipp, CTO of 
STORServer (www.storserver.com), rec- 
ommends determining your business 
requirements before looking at any storage 
technology because it's easy to become 



Before making potential storage invest- 
ments, take stock of not only your current 
storage hardware but also your business 
needs and future storage requirements. 

Although a new technology might appear 
to be the perfect solution, don't lose sight 
of any business problems you're trying 
to solve. 

Consider using data classification initia- 
tives to more accurately determine the 
right size for your storage environment 
and more easily store certain data types 
on the appropriate storage medium. 




Key Points 



Making the most of your storage budget 
doesn't necessarily require fancy tricks or 
creative manipulations of investments or 
hardware. Instead, experts advise to step 
back and look at the bigger picture before 
plowing forward with changes. 

Inside Knowledge 

The first step to optimizing your storage 
budget and making smart investments is 
gathering a better understanding of your 
specific storage pain points, explains 
Bradley Brodkin, president of HighVail 
Systems (www.highvail.com). If you're 
looking to buy new equipment, you should 
have a good idea of what you already have, 
how new systems compare to your existing 
equipment, and what might be missing in 
your current environment. This approach 
can help you improve your storage efficien- 
cy without burdening your budget with 
unnecessary costs. 

"While storage demands are increasing, 
data center and IT managers shouldn't just 
buy new equipment," Brodkin says. "They 
must also look outside of the box and con- 
sider new and alternative technologies like 
virtualization, deduplication, and thin provi- 
sioning and how they can help them do 
more with less. Also, by understanding their 



enamored with something new and forget 
that you're trying to solve a business prob- 
lem. Although technology companies 
introduce new products and change exist- 
ing products often (and for good reason), 
it's not in a data center manager's best 
interest to simply follow every trend. 
Instead, be wary, Lipp says. 

Smart Scaling 

When existing equipment (or changes to 
that equipment) won't suffice for increasing 
storage demands, managers must determine 
how best to add to their storage architec- 
tures. Scalability remains a big part of stor- 
age budgeting, and Brace Rennels, project 
manager at Double-Take Software (www 
.doubletake.com), notes that disk space is 
cheap and that you should forecast your 
storage requirements for the next two to 
three years. A successful forecast depends 
on your ability to accurately gauge the scal- 
ability of your current hardware. 



"You must also consider if another disk 
array can be added to the existing one, if 
the size of the drives can be updated to a 
larger capacity, and if there is enough 
power and/or Ethernet or SCSI connec- 
tors available in the rack to expand," Ren- 
nels says. "Part of the capacity planning 
should include future storage require- 
ments and also determining if the required 
infrastructure is in place to accommodate 
that future expansion." 

Extend Your Storage Strategy 

Getting a better handle on 
your storage budget shouldn't 
be a one-shot deal, but instead 
an evolution that rolls with the 
changes of your storage archi- 
tecture. Because your storage 
needs can change throughout 
the year, it's wise to track 
those changes to ensure you 
are making the right invest- 
ments that can accommodate 
increased storage needs when 
necessary without overshoot- 
ing your budget. One way to 
track your storage is through 
auditing, which can identify 
opportunities for improve- 
ments where needed. 

"Data center and IT man- 
agers should have data clas- 
sification initiatives to audit 
their systems and allow the 
right placement of data," 
says Dr. Mickey S. Zandi, 
managing principal, consult- 
ing services, SunGard Availability Ser- 
vices (www.availability.sungard.com). 
"Organizations need to 'right-size' their 
storage environment. Data can be moved 
to less-expensive SATA or tape storage. 
. . . Improvements can often be made by 
knowing what has to be backed up to the 
most expensive disk files and removing 
or cleaning up what is currently consid- 
ered lower-tiered data." 

Finally, don't disregard perhaps the 
ultimate budget-saver when it comes to 
storage: the DELETE key. "The cheapest 
storage is that which we don't actually 
consume," Lipp says. "If [data] has no 
value to the organization, get rid of it. 
Storage bloat is probably the No. 1 prob- 
lem in data centers today. In many cases, 
we capitulate to the notion that it is just 
too expensive to find and remove data 
that we don't require. This may be true 
for those with unlimited budgets, but for 
the rest of us, it probably isn't." Q 



Top Tip: Don't Be Swayed By Name Alone 

Growing comfortable with a vendor certainly imparts benefits for a data center, but it's not always the 
most budget-friendly approach to making storage investments. Although factors such as brand recog- 
nition or a vendor's reputation should play into the overall buying process, it's shortsighted, at best, to 
base an entire buying decision on name recognition alone, says Paul Martin, IT manager at Poulin 
Grain (www.poulingrain.com). 

'Take a hard look at your needs, solicit input from wherever you can — you will be surprised where 
insight and inspiration can come — and never settle," Martin says. "If you find something close to what 
you are looking for, then keep looking. Your needs are not unique no matter what you may think. You 
may be a bit ahead of the curve occasionally, but if you stay alert to what is happening in the indus- 
try, including networking yourself with peers, your quest will undoubtedly lead you down the path to 
exactly what you are looking for at a price that you and your budget can be comfortable with." 
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ENCLOSURES & RACKS 

Hergo is a U.S. designer and manufacturer of 
technical Workspace Solutions. 



Command Centers ■ Relay Racks 



■ Control Stations 


■ Flat Panel Monitor Arms 


■ PACS- Mobile Carts 


■ Motorized Workstations 





ergO' 888.222.7270 www.hergo.com 



T 



GSA Contract # - GS-29F-01 33G 

56-01 55th Avenue, Maspeth, New York 11378 



PDUs Direct 
To You 

Top Quality At Tlie Lowest 
Price Available 

hy Blaine Flamig 

Premium power distribution without 
the premium price. Such a notion may 
sound too good to be true in today's sag- 
ging economy, but such an approach is 
precisely the customer-oriented mission 
PDUs Direct (www.pdusdirect.com) was 
built on and continues to operate by. 

As the online wholesaler of basic, 
metered, and switched PDUs from long- 
time PDU maker Server Technology's 
product line, PDUs Direct is dedicated 
to providing its customers the highest 
quality in-rack power strips, power dis- 
tribution, and rack PDUs offered at best- 
in-class prices. 

Established in November 2008 at 
the outset of the economic downturn, 
PDUs Direct understands the financial, 
cost-cutting challenges now facing 
SMEs. That's why PDUs Direct is com- 
mitted to supplying its customers with 
industry-standard, industrial-grade PDUs 
suitable for network and server environ- 
ments at prices falling 10 to 20% below 
competitors' online prices. PDUs 
Direct' s customer commitment extends 



contact 

PDUs Direct 

(888) 751-7387 
www.pdusdirect.com 
sales@pdusdirect.coin 
(product, application, 
and order inquires) 
support® pdusdirect 
.com (tecii support and 
return inquires) 



to the company's easy-to-use, unclut- 
tered Web site, which makes locating the 
right PDU a quick, streamlined process 
without skimping on the pertinent prod- 
uct information customers require. 

PDUs Direct' s dedication to its cus- 
tomers is seen through its next-business 
day shipping policy; 100% satisfaction, 
30-day money-back product guarantee; 
and ultra-convenient email and live chat 
technical support options. Whether the 
question or concern is in regard to a prod- 
uct, order, or application, PDUs Direct' s 
chat support pairs customers with live 
operators who possess years of real-world 
PDU experience and knowledge. Custom- 
ers can even request a chat transcript for 
reference following a chat session. 

PDUs Direct power distribution units 
are constructed in steel-case enclosures, 
available in a variety of outlet and 
power-level configurations, and ship 
with a customer-selected power cord. 
Each switched PDU sold also includes 
the latest firmware from Server 
Technology and fully networked outlet 
management and power and environ- 
mental monitoring abilities. 



PDUs 



direct 




Prepare For The Unexpected With Room Alert 



]V^o one knows when or how disaster will 
strike. Wejust know the potential is always there. 
So preparation is crucial to mini[nizing iLs impact 
on computers, networks, users & business. 

When disasters occur, there are significant 
costs in ai^cas that go far beyond the simple 
replacement ofdamaged hardware. This is 
because what happens in the data center or other 
facility effects the entire organization. If disaster 
strikes your facility, how will il impact business? 
Who will gel the blame? Could il have been 
prevented? What will it cost? 





Snlutitms 




Stan At $195 


Room Aleii products can nmiiitor: 


' Temperature 


* Smoke /Fire 


' Humidity 


■ Air Flow 


' Heat Index 


• Sound, Light 


■ Main/ UPS Power 


' Panic Buttons 


• Flood /Water 


• Dry Contacts 


' Room Entry, Motion 


' Switch Sensors 


■ IP NetworK Cameras 


■ Wireless S More 



AVTECH has a full line of powerful, scalable 
Room Aleri solutions for real-time 
eiiviroiimeiit monitoring in a computer room, 
data center or other facility. All models 
arrive assembled with easy to in.stall 
hardware, cables, sensors, easy-to-use 
logging &. alerting software, printed 
documentation, unlimited technical support 
and a '30-Day Satisfaction Guarantee'. Users 
can typically install in under 10 minutes. 

Room Alert products monitor critical 
environment conditions like temperature, 
power, humidity, flood, smoke, room entry, 
air flow, motion and more, alert stalTby any 
iTiethod and can take automatic corrective 
action. There is a model that is right for any 
organiz;ation and budget... yours tool 

Call or Visit Us Online Today 



S^AVTECH 



888.220.670Q • 401.628.1600 
AVTECH.com 



Protect Your IT Facility... Don't Wait Until Ws Too Late!' 



■ AVThCH islln:tU!rld«iJL- Itudirri.J' IT & latililiirs 



.■rilM).)riiUin.viii. Iit:si;[lur iriqijiriL-s ivl-L-imi 
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News 



I Report Reveals Risky 
Social Networking Habits 

According to the 2010 Consumer Reports 
State of the Net survey, more than half of 
social network users post data that makes 
them vulnerable to cybercriminals. Adult 
users of sites such as Facebook, MySpace, 
and Twitter list birth dates, children's pho- 
tos, and personal addresses. About 1.5 mil- 
lion Internet-connected homes are victims 
of social network abuse because of mal- 
ware infections, scams, and harassment. 
About 38% of adult Facebook app users 
were either confident the apps were secure 
or hadn't thought about it, according to 
Consumer Reports. 




I New Healthcare Funding 
To Kickstart Training Programs 

The Office of the National Coordinator for 
Health Information Technology is using a por- 
tion of $2 billion in discretionary money to 
educate and train health IT professionals in 
electronic medical record technology. The 
new grant program should add 45,000 to 
50,000 jobs to the health IT field in the next 
five years. Overall, the ONC has already dis- 
persed health IT funds to 70 community col- 
leges and universities for training programs. 
The ONC's 556-page draft rule for electronic 
medical records establishes a four-year time- 
line for implementing systems starting in 
201 1 . According to the Notice of Proposed 
Rule Making, private practice physicians who 
roll out electronic medical records and make 
"meaningful use" of them could get a payout 
of up to $44,000. 




COVER FOCUS 



I HP Hires Former Microsoft Exec 

A former IVIicrosoft executive who left the 
software giant in January will apply his talents 
to HP's software ambitions. Bill Veghte will 
become the executive vice president for HP 
Software and Solutions, where he will be 
deeply involved in HP's management tools, 
business intelligence, information manage- 
ment, and media software products. 

I Intel Announces Investment Plans 

Intel announced it will focus on cloud com- 
puting and mobility organizations in its 
pledge to invest $200 million in U.S. compa- 
nies. It has already spent about $15 million 
on Caring.com (an eldercare site), SmartZip 
Analytics (online real estate investment rat- 
ings), and Virtustream (cloud-based services 
provider). Mobility and cloud computing 
innovations will stimulate growth in hard- 
ware, such as computers and portable de- 
vices, which will benefit Intel. Intel has also 
recently invested in Tabula Digita, which 
produces educational games, along with 
Overture Networks (a Carrier Ethernet pro- 
vider) and BlackArrow, which offers adver- 
tising technology. 



Budget For Power 



& Cooling 

Efficient, Effective Financial Strategies 
That Won't Break The Bank 



Key Points 



Consider increasing virtualization because 
it can cut down on power and cooling costs, 
especially as a data center grows. 

Create a baseline that includes the 
amount of actual power used under 
various load conditions, which allows 
for better usage tracking. 

Even slight tweaks to the overall setup, 
such as increasing the temperature by 
one or two degrees, can lower power 
consumption and subsequently power 
and cooling costs. 



by Elizabeth Millard 

m • • 

Two OF THE LARGEST BUDGET KILLERS Can 

be power and cooling, as data centers 
attempt to boost capacity without risking 
downtime. There are numerous strategies 
for tweaking equipment and setup, starting 
with analyzing the performance of the cool- 
ing system (for more information, see 
"Evaluate Your Cooling System" on page 
25) and purchasing technology that can 
scale. To make the most of your power and 
cooling dollars, here are some top tips for 
boosting efficiency without going broke. 

Create A Longevity l\/lindset 

Although data center managers excel at 
keeping operations running on a day-to-day 
basis and planning for short-term growth, 
they should put those powers to use for see- 
ing their power and cooling needs in the 
long run, as well. 

"Power and cooling systems, generally 
speaking, have a maximum capacity poten- 
tial," says Kris Domich, principal consultant 
at Dimension Data, adding that this capacity 
can vary based on age, load, and degree of 
preventive maintenance undertaken during 
the product's life cycle. Although this type 
of maintenance is key to ensuring that sys- 
tems meet or exceed their rated life spans, 
their realized life cycles of usefulness will 
be most affected by the load put upon them 
by data center systems. 

"Longevity is therefore a product of 
planning, managing capacity, and avoiding 
parasitic situations such as poor equipment 
layouts, large numbers of underutilized 
server and storage systems, and other prac- 
tices that may hinder proper airflow in the 
data center," Domich says. 

Increase Preventive l\/laintenance 

With longevity in mind, a data center 
can put a maintenance program in place 
that's specific to power and cooling sys- 
tems. Daniel Calderon, facility director at 
Host.net, says that preventive maintenance 
allows his team to proactively correct possi- 
ble system component failures before they 
occur, avoiding costly downtime. 

He says, "We follow a strict manufac- 
turer-recommended preventive mainte- 
nance checklist, which includes testing 
and monitoring everything from large sys- 
tem components like compressors and 
blower fans in CRAC units, to AC and DC 
caps and batteries in UPS systems, down 
to circuit boards, contactors, and filters to 
ensure all are within recommended toler- 
ances." Real-time monitoring systems also 

Top Tip: Know Your PUE 

One way to identify savings in power and cooling is by knowing a facility's PUE (power usage effec- 
tiveness) numbers, says Daniel Calderon, facility director at Host.net: "Calculating your PUE will give 
you a reference point in determining if your strategies are working." 

PUE is determined by dividing the total power into the facility by the IT equipment load. The lower the 
ratio, the more efficiently the data center is running. If there's a higher ratio, Calderon notes, this tells 
the data center manager that most of the electrical consumption in the data center isn't being con- 
sumed by the IT load, but rather by the cooling and power equipment and other non-IT equipment. 



play an important role, he adds, because 
they help quickly detect and assess poten- 
tial problems. 

Consider Virtualization 

Many data centers are using virtualization 
to increase capacity while keeping power 
and cooling costs steady, and Domich 
thinks that the strategy could be even 
more widely utilized than 
it is already. 

"Equipment longevity 
and efficiencies in space, 
power, and cooling are 
directly tied to the load 
put onto each of these 
elements," he says. "Or- 
ganizations should em- 
brace virtualization and 
set goals to be as fully 
virtualized as possible in 
the short term." 

Most standalone serv- 
ers are underutilized 
from CPU, RAM, and 
I/O standpoints, he be- 
lieves, yet still require 
a minimum amount of 
base power and cooling 
just to remain on. "Every 
underutilized system is 
taking more than its fair 
share of space, power, and cooling com- 
pared to the same system as a virtual work- 
load," he says. 

Create A Baseline 

To develop more efficiencies and use 
budget dollars more effectively, it's impor- 
tant to first baseline the total number of 
servers, both physical and virtual, and note 
the total amount of actual power attributed 
to them under various load conditions, 
according to Domich. 



"Once this baseline is established, devel- 
op scenarios depicting varying levels of 
additional virtualization on a given physical 
platform, including target consolidation 
ratios of virtual machines per physical serv- 
er," he says. 

Because server instances will likely con- 
tinue at a rate specific to the data center's 
environment, the manager can track power 
usage and requirements against the growth 
of virtual servers in contrast to physical 
servers. Domich adds, "The efficiencies of 
workloads — ^both physical and virtual — per 
real kilowatt of power and ton of cooling 
should become evident." 

Tweak The Setup 

To ensure maximum efficiency, a data 
center should employ a properly maintained 
hot aisle/cold aisle distribution, notes 
Calderon. This creates a proper path for 
return air and maximizes the mixing of sup- 
ply and return air. 

Also, increasing the overall temperature 
set points in the data center by even one or 
two degrees will reduce compressor load 




and, ultimately, power consumption, he 
adds. Another tip is to use staging compres- 
sors or variable-frequency drives on blower 
fans, which can help the system to run opti- 
mally and efficiently. 

For better cooling, take a look at how the 
room is insulated, notes Peter Sacco, presi- 
dent of PTS Data Center Solutions (www 
.ptsdcs.com). "Have sufficient insulation 
between the computer room and adjacent 
spaces, especially where windows or out- 
side walls are considered," he says. It might 
be advantageous to get rid of windows alto- 
gether, he adds, because they tend to have a 
"solar heat gain potential." 

In terms of where the gains will be real- 
ized from these types of tweaks, Calderon 
says data center staff should notice the 
improvements fairly easily; properly main- 
tained equipment means less system com- 
ponent breakdown, fewer alarms, and 
maintained set points. He notes, "You 
should then see those savings on your 
power consumption." 
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Control Your 
Personnel Costs 

Skills Assessments, Compensation Adjustments 
& Training Incentives Are Key 



by Phil Britt 

Making the most of your personnel bud- 
get is not easy in a time of economic 
uncertainty. Layoffs are prevalent, and hir- 
ing is challenging. Industry experts agree 
that the best way to stretch your personnel 
dollars in the data center is to assess the 
human resources already in place and 
make changes in workloads, compensation, 
and training. 

Focus On Skills, Not Numbers 

Many experts believe that the best way 
to cut personnel costs is to eliminate per- 
sonnel wherever possible through a com- 
bination of virtualization, outsourcing, and 
squeezing efficiencies out of legacy and 
new technology in the data center. 
However, simply getting rid of employees 
is not always the answer; instead, any staff 
reduction should look at skills rather than 
just head count. 

"The first step is to conduct a skills 
assessment," says Rob Enderle, princi- 
pal analyst for the Enderle Group. "What 



skills do you need and what skills do you 
have? How many of those can be virtu- 
al employees? That will give you a start- 
ing framework." 

Steve Yellen, vice president of market- 
ing and product development at Aperture 
(www.aperture.com), recommends out- 
sourcing "busywork" as much as possible 
so that data center employees can solve 
problems and perform other valuable 
tasks rather than getting caught up in 
minutiae. "Now that everything is con- 
nected, problems can be solved quicker, 
but sometimes people don't understand 
the value of basic blocking and tackling," 
Yellen says. 

"The bottom line is that you are always 
going to have to have people," says Sean 
Morris, director of sales for Digitech 
Systems (www.digitech.com). "You have 
to look at whether it is better to cut some- 
one or to change their focus." Morris adds 
that the data center should have the 
employees focus on core competencies 



Key Points 



Personnel with legacy skills may be cost- 
ing too much for the skills that they pro- 
vide. Employees with new and different 
skill sets might provide more value. 

Build compensation based on bonuses 
and base pay. Keep entitlements to a 
minimum because the cost can be hard 
to control. 

Companies can offer partial or full 
reimbursement for approved training 
but should stipulate repayment if the 
employee doesn't stay with the company 
for a certain period of time after the 
training is complete. 




and use managed services for any needs 
outside of those core competencies. 

"Today, it is a question of the retention of 
the right type of personnel," adds Blase 
Salvatore, president of Mercadien Tech- 
nologies, a division of the Mercadien Group 
(www.mercadien.com). Although the recent 
economic downturn and 
consolidations in many 
data centers have made 
it a buyers' market for 
employers, people with 
some specialized skills 
and data center techni- 
cians who possess cer- 
tain combinations of 
skills are still very diffi- 
cult to find. "You need 
to be able to hire the 
right people at the right 
price," Salvatore says. 

Similarly, the people 
retained in any right- 
sizing must be the right 
people with the right set 
of skills. "Maintenance 
is massively affected by 
legacy personnel who 
are used to big, cumber- 
some legacy systems," 
said Brian Gentile, CEO of Jaspersoft 
(www.jaspersoft.com). "Part of those 
maintenance costs should be going toward 
weeding out personnel or updating person- 
nel to those who can handle the next cou- 
ple of decades of systems, which are very 
agile and lightweight. So the question 
management needs to start asking is not 
'Are we spending too much on people?' 
It's 'Are we spending enough on the right 
kind of people?'" 

Compensation Concerns 

Employee compensation is a tricky topic 
to navigate, but experts agree that there are 
areas to improve upon when it comes to 
budgeting for compensation. For example, 
your current staff might be overpaid due to 
agreements made when workers were much 
harder to find, says David Foote, CEO and 
co-founder of Foote Partners. 

Even when hiring new employees, com- 
panies tend to overpay because they rely 
too much on salary surveys to determine 



compensation levels, according to Foote: 
"Companies look at salary surveys and try 
to match them to titles, but salary surveys 
are deeply flawed. The titles don't match 
what the people actually do." 

According to Foote, the data center can 
better control its personnel costs, as well as 
the value it derives from its staff, by paying 
less in annual base pay and more for specif- 
ic skills. "It's very difficult to reduce 
salaries. It's much easier to reduce variable 
compensation," he says. The data center 
might also offer additional compensation 
for specific projects. 

Skills tend to be more valuable than certi- 
fications, Foote continues. The pay for certi- 
fications has gone down and the pay for 
noncertified skills has gone up in the past 
three years. "The value of skills changes 
every year," Foote says. "Companies that 
roll skills into salary tend to overpay. Skills 
are more dynamic than salaries." 

Although Foote says that it is difficult to 
move an employee from a high salary to a 
more incentive-based payment plan, 
Salvatore says installing such a plan will 
quickly uncover the employees who are 
complacent and those who provide real 
value to the data center. In addition to certi- 
fications, Salvatore recommends including 
performance incentives for uptime and cus- 
tomer satisfaction, because both are mea- 
sures of the employee's actual value to the 
data center. 

John Challenger, CEO of Challenger, 
Gray & Christmas, adds that the mone- 
tary compensation can be controlled 
more easily than benefits, such as health 
care, because the company has little 
input in premium increases, so he recom- 
mends keeping benefits low as a percent- 
age of total compensation. 

"You need to keep entitlements down 
because they can be difficult to get rid of," 
Enderle agreed. 

Use Training Incentives Wisely 

Training can be another significant per- 
sonnel expense, but it' s one that can be con- 
trolled using a couple of different strategies. 

Enderle recommends reimbursing your 
employees for approved training. Other rec- 
ommendations include providing partial 
reimbursement for training, with stipula- 
tions that reimbursements must be repaid if 
an employee leaves the data center before a 
certain amount of time. 

However, Salavatore says that companies 
shouldn't depend on training to make up for 
any deficiencies a worker has when initially 
hired but to help the employee and data cen- 
ter benefit from additional skills. . 



Top Tip: Use Third- 
Party Recruiting 
Services Wisely 

After assessing their current personnel and 
skill sets, data center admins may find that 
they need to add personnel. However, in 
many companies, human resources opera- 
tions have been reduced in response to the 
recession, so admins may need to rely on 
third-party headhunters, particularly if they 
are looking for certain skill sets or specialties. 

But even when using a third party for recruit- 
ing and hiring, the data center should do its 
own background check on any potential 
hires, advises Rob Enderle, principle analyst 
for the Enderle Group. He adds that the 
data center should also conduct due dili- 
gence on any hiring firm by investigating the 
success previous placements have had. 




I McAfee Offers Free Security Review 

To compensate business customers for its 
recent faulty update, McAfee is offering com- 
panies free one-year subscriptions to its 

security assess- 
ment service. 
The company 
notes that it 
may also give 
away other ser- 
vices as further 
compensation, de- 
pending on how individ- 
ual companies were affected 
by the update. Consumer cus- 
tomers are also in line for reimburse- 
ment of what McAfee called "reasonable 
expenses," which likely means the ordinary 
and reasonable costs of taking an affected 
computer to a local tech support specialist. 
The company also notes that it will extend 
affected consumer customers' security sub- 
scriptions by two years. 

I lE's Browser Share Dips Below 60% 

According to the latest statistics from market 
analyst Net Applications, Microsoft's Internet 
Explorer is losing market share, while Google's 
Chrome is gaining ground and Mozilla's Firefox 
and Apple's Safari are holding steady. Specif- 
ically, Internet Explorer fell to 59.95%, down 
0.7% from the previous month, marking the 
first time Net Applications has shown lE's 
share falling below 60%. Chrome gained 
0.6% month over month to reach 6.73% and 
is believed to be on pace to top 10% by the 
end of the year. Firefox made a slight gain, 
climbing 0.07% to reach 24.59%; Apple's 
Safari made an identical gain, going from 
4.65% of the market to 4.72%. 




I Report: United States 
Relays Most Spam 

According to a report released by Internet 
security vendor Sophos, the United States is 
the top spam-relaying country in the world, 
responsible for about 1 3% of all spam pro- 
duced. Joining the United States in the top 
five are India, accounting for 7.3% of all spam; 
Brazil, with 6.8%; South Korea, with 4.8%; 
and Vietnam, with 3.4%. European nations in 
the top 15 include France, Italy, and the UK. 
Coming in at No. 15 is China, which many 
analysts find surprising given the country's 
history, which includes allegations of a recent 
attack on Google. However, Sophos' study 
shows that China is responsible for only 1 .9% 
of spam volume and that the amount of spam 
originating from China has steadily dropped 
over the past 12 months. 

I McAfee Profit Drops 

Record financial results couldn't stop a profit 
slide for McAfee in the first quarter. Revenue of 
$502.7 million for the quarter was a record and 
represented a 12% jump on an annual basis, 
while a cash flow of $157 million — 8% higher 
than a year prior — marked a record in its own 
right. However, net GAAP income slid 30% 
from a year ago to $37.6 million, and earnings 
dropped 32% to 23 cents per diluted share. 
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PHYSICAL INFRASTRUCTURE PRODUCT SPOTLIGHT 



Company 



Description 



Contact 



Company 



Description 



Contact 



able Suppliers 



ADC 




Founded in 1935 in IVIinneapolis, 
ADC is a leading provider of inno- 
vative networl< infrastructure equip- 
ment and professional services, 
including high-speed Internet, video, data, and voice to residential, business, and mobile 
subscribers on a global scale. With about 9,500 employees worldwide and sales in more 
than 130 countries in Asia, Europe, Africa, and the Middle East, ADC provides connec- 
tions for wired, wireless, cable, broadcast, and enterprise networks. 

ADC believes that the need for ubiquitous access, scalable bandwidth, and robust, reli- 
able connectivity is no different whether the customer is a carrier, cable company, or 
enterprise, as all rely on ADC's network infrastructure expertise to help design and 
deploy broadband networks that deliver advanced but varying services to meet increas- 
ing bandwidth demand. 

Products Include: 

• Fiber optic compact building plenum and riser cable 

• Augmented CAT 6 DTP plenum and riser data cable 

• Augmented CAT 6 F/UTP plenum and riser data cable 

• CAT 6 UTP plenum and riser data cable 

• CAT 5e UTP plenum and riser data cable 

Best For: All types of data center and enterprise applications — specifically, high-density 
situations where reduced-size copper cabling is an ideal fit. 



Black Box 



^-BLACKBOr 

714-7U-SSM 




(800) 366-3889 
www.adc.com 



With 175,000 clients in 141 countries and 194 offices globally. Black Box is a major suppli- 
er of structured cabling, including end-to-end solutions for CAT 5e, CAT 6, CAT 6a, CAT 
7, fiber, and custom cabling needs. In 1976, the company began offering free technical 
support before and after the sale. Today, Black Box still boasts free 24/7, live, U.S. -based 
tech support for 1 1 8,000-plus networking and data communications products with calls 
and mouse clicks answered in 20 seconds or less. 

Most Black Box cables carry a guaranteed-for-life warranty, and 95% of all in-stock 
products ship the same day. Black Box has long been a resource for hard-to-find, lega- 
cy, and custom products, particularly cables and adapters that customers can design at 
the company's site. 

Products Include: 

• Solid, stranded, high-density, and multiple-color and -length copper UTP and STP 
bulk and patch cables 

• Distribution, armored, indoor/outdoor, loose-tube, tight-buffered, and other fiber optic 
bulk and patch cables 

• Adapters, terminators, connectors, and data communications cables, including A/V, 
USB, and power cords 

• New SpaceGAIN line of space-saving cables and patch panels, including exclusive 
90-degree right-angle (left, right, up, down) UTP patch cables; 48-port, 1 U patch pan- 
els; and 45-degree angled-port patch panels 

Best For: Companies needing end-to-end cabling solutions. 



(724) 746-5500 

www.blackbox.com/go/SpaceGAIN 



NetCablesPlus 




Operating as an online network and 
PC cabling superstore, NetCablesPlus 
serves companies of all sizes needing 
high-quality cables, tools, and acces- 
sories at wholesale prices. Based in 
Cumberland, R.I., NetCablesPlus has 

been in the retail business since 2004 and now has more than 20,000 customers. The 
company offers data center managers, systems integrators, and other business clients 
24/7 online access to an inventory of more than 1 1 ,000 products from well-known manu- 
facturers at low prices. In addition to being a Molex Premise Networks Reseller, the 
company also recently became a Cisco Partner. 

All NetCablesPlus' cables are factory-tested and are sold with a lifetime warranty and 
unconditional money-back guarantee. Whether purchasing a single patch cable or a 
truckload of bulk reels of cabling, the company offers fast, friendly customer service that 
includes same-day stateside and offshore shipping. Most cable products can be shipped 
from facilities on the East Coast, Midwest, or West Coast to ensure fast delivery times 
and low shipping costs. 

Products Include: 

• CAT 5e and CAT 6 patch cables 

• Fiber optic patch cables, including single-mode, multimode, and multiple connector types 

• Patch panels, keystone jacks, plugs, and adapters 

• Bulk cabling, tools, and accessories 

Best For: Data centers of any size requiring copper or fiber optic Ethernet patch cables. 

(401) 475-6040 
www.netcablesplus.com 



PDU Cables 




PDU Cables has been a leading supplier of power distribution cable assemblies to data 
centers throughout North America since 1981 . The company's philosophy is to provide 
thorough product knowledge and quick customer service to data centers. In addition to 
being the first independent cable assembly company to introduce colored conduit into 
the power distribution market, PDU Cables was the first company to get a UL 478 listing 
and the first to introduce the Power Cables and Equipment Configurator. 

Based in Minneapolis, PDU Cables provides customers 24-hour turnaround and stan- 
dard transit times of one to three days to most U.S. destinations (cable expediting is 
available). Currently, more than 5,000 U.S. data centers use PDU Cables' products to 
save time and labor and to help reduce overall project costs. PDU Cables is also the 
sole supplier of the Air Guard Cable Seal product line. 

Products Include: 

• UL-listed and tested under-floor power cable assemblies 

• Molded cord assemblies 

• Air Guard Cable Seal product line 

Best For: Raised-floor data center applications. 



(866) 631-4238 
www.pducables.com 
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Processots Product Spotlight highlights options available in key data center product categories, providing product information side-by-side for easy comparison. 

Compiled by Blaine Flamig 



Blue Wave Communications 




CableOrganizer.com 



Blue Wave Communications is more than just a cabling contractor that installs structured 
cabling systems. Instead, the company sees itself as a "long-term partner committed to 
the highest-quality work with your best interest in mind." Operating from its Miami home 
base. Blue Wave Communications got its start in 2004 as an extension of Compuquip 
Technologies, which had been in the cabling business for about 20 years before con- 
sumer growth warranted the launch of Blue Wave Communications to satisfy increasing 
demand for speed, efficiency, and security in cable infrastructure. 

Blue Wave initially performs a comprehensive onsite analysis of all network cabling 
needs for customers, after which the company is typically able to provide a customer 
quote within 48 to 72 hours. Following the installation of cabling systems, during which 
Blue Wave uses only in-house technicians and involves no subcontracted labor, the 
company completely tests and certifies the entire installed cabling system. Additionally, 
the company offers a one-year workmanship warranty and extended manufacturer war- 
ranties that range from 15 to 25 years. 

Products Include: 

• CAT 5e and CAT 6 cabling 

• Optical fiber and CATV installations 

• Existing infrastructure evaluation 

• New cabling infrastructure 

Best For: Companies needing a contractor for structured cabling design and installation 
on large projects or everyday cabling moves, additions, and changes. 



(305) 436-8886 
www.bwcfla.com 



W§% cableorganizer' 

W^}0 com 



Co-founded in a garage by a husband-and-wife team with just $30 to register a Web site 
name, CableOrganizer.com has since grown into a global vendor of cable and wire 
management products. Based in Fort Lauderdale, Fla., CableOrganizer.com now oper- 
ates a subsidiary in Rennes, France, and boasts an inventory of more than 31 ,000 
SKUs available through the company's online storefront, which is aimed at everyone 
from individuals to large corporations, hospitals, and government offices. 

CableOrganizer.com's cable and related products are adaptable for computing, automo- 
tive, industrial, office networking, and other settings. The company also claims several 
major global brands and organizations as customers. Customer service is available via 
phone, email, or the company's extensive online help center. Shipping usually occurs 
within two business days. 

Products Include: 

• CAT 5e and CAT 6 cabling 

• Related tools, jacks, racks, ducts, and testers 

• Fiber optic cabling 

Best For: Anyone from individuals to large enterprises seeking a 24/7, one-stop 
shopping experience personalized to respective customers. 



(866) 222-0030 
www.cableorganizer.com 



Rackmount Solutions 




Warehouse Cables 



Rackmount Solutions has been in busi- 
ness since 2001 and is focused on pro- 
viding rackmount storage solutions that 
make an IT/network professional's life 
easier. When cabling a rack, you want 
extra space, easy access, and efficient 
routing. Rackmount's multitude of cabi- 
net configurations and cable managers 
provide that desired ease of use. 



Customers receive unparalleled customer service from Rackmount Solutions' staff who 
know the nuances of the company's products and can assist you in making your "best 
fit" decision. Order from Rackmount Solutions' extensive 24/7 online ecommerce store 
or call the toll-free line to speak directly with a sales representative. 

Rackmount's ISO 9001 :2008 quality managed system ensures that government, com- 
mercial, educational, and reseller customers get on-time deliveries, fewer damaged 
shipments, and prompt responses to questions and returns. 

Products Include: 

• Shielded and unshielded cable 

• CAT 5e and CAT 6 patch panels 

• Stranded, solid, plenum, and fiber cabling 

• Custom cable assemblies 

Best For: New or retrofit installations in data centers of all sizes. 



Warehouse 
Cables 



Founded in 2002 and operating out of Warwick, R.I., Warehouse Cables is a national 
supplier of computer network cabling and connectivity-related products aimed at com- 
mercial, industrial, and military purposes. Selling aggressively priced standard, custom, 
and OEM cable products manufactured stateside and overseas, Warehouse Cables 
aims to optimize cable performance and ensure industry specification compliance for 
each cable by using quality components and cutting-edge construction technologies. 

Through its Web site. Warehouse Cables operates with the goal of making it easy for 
customers to find what they need, letting customers locate, specify, and fill requirements 
in a few mouse clicks — an approach well-suited for companies that want the most direct 
means possible for purchasing. As a brick-and-mortar company. Warehouse Cables 
emphasizes strong customer support to help customers make informed purchases, 
completes credit approval quickly, meets high-volume requirements, and provides pric- 
ing and delivery alternatives. In addition to fast shipping. Warehouse Cables includes 
shipment notifications and tracking. 

Products Include: 

• CAT 5e, CAT 6, UTP, and STP cable 

• Fiber optic cable 

• Computer peripheral cables 

• Patch panels, connectors, and adapters 

• Tools, testers, and accessories 

• Audio/video cables 

Best For: Companies seeking standard, custom, and OEM cable via an easy-to-use 
online setting or with personalized customer service. 



(866) 207-6631 
www.rackmountsolutions.net 



(866) 738-8993 
www.warehousecables.com 
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Study Seeks To 
Determine Cell 
Phone Risks 

A team of European scientists has set out to 
determine whetlier cell phones can really 
cause health issues. The Mobile Telecom- 
munications and Health Research Program 
will conduct a longitudinal study, following 
250,000 people for 20 years or more, seeking 
to determine whether there are any risks to 
the 6 billion people who use mobile phones. 

It's not likely that there will be an analogous 
U.S. research project, say analysts, and 
although U.S. scientists and telecommuni- 
cations experts will watch the European 
study carefully, most doubt that there are any 
real hazards. 




Telecom officials refute the idea that radiation 
from such devices is a health risk: "There is 
no accepted scientific evidence that the radio 
signals from mobile phones, two-way radios, 
or other wireless communications devices 
present a hazard to users or the public," says 
a 2006 IVIotorola report. 

That's not to say that companies haven't 
investigated the possibility. IVIotorola itself 
has run long-term tests to uncover any risks, 
even studying the effects on pigs of listening 
to cell phones for extended amounts of time 
to see if they developed radiation-related 
health problems. 

Difficulties In Drawing Conclusions 

Despite the seemingly extensive study over 
the years, many unknowns remain. "Really, 
we can't tell yet," says Ken Dulaney, Gartner 
analyst and vice president, about any possi- 
ble dangers. "It's uncertain; we're all part of 
a 30-year experiment to determine whether 
there's a risk." 

Strategy Analytics analyst Sue Rudd says 
that certain types of exposure may increase 
risk but points out that it would probably 
require a user to engage in multiple risky 
behaviors, including prolonged exposure 
(possibly seven hours or more per day) and 
being located near a base station. 

Some analysts feel more study is needed. 
"Health concerns about cell phones causing 
cancer are probably overblown and mostly 
the result of a misinformed public," says Chris 
Taylor, Strategy Analytics' director of RF and 
wireless components. "It is a bit disturbing, 
however, that almost 1 .5 billion cell phones 
ship every year and very little funding has 
gone into finding a definitive scientific answer 
to this question." 

Those behind the European study may finally 
provide some answers, but not for several 
years. In the meantime, Gartner's Dulaney 
suggests that concerned individuals simply 
opt out of the whole issue by texting, using 
Bluetooth headsets, and limiting their time on 
the phone. 

by Rod Scher 
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SIX QUICK TIPS 



Consolidating 
Data Centers 

The Best Approaches For Less Pain 



by Bruce Gain 
• ■ ■ 

Merging two or more data centers is a 
common undertaking in today's IT 
world. Companies get purchased and are 
merged, which means data center opera- 
tions are combined, as well. Enterprises 
cut staff and office locations are shut 
down, and as a result, a lot of data center 
capacity becomes redundant. Virtualiz- 
ation and other technologies can also 
allow data centers to handle more appli- 
cation loads with significantly fewer 
servers, sometimes allowing for a single 
facility to handle the workload of two or 
more locations. 

But regardless of the reasons behind the 
move, data center consolidation is never 
easy, given the inevitable application 
downtime, logistical planning, and other 
challenges involved in such a project that 
can easily represent millions of dollars in 
costs. However, there are ways to make 
the undertaking less painful and ensure 
that data center consolidation interferes as 
little as possible with your enterprise's 
business operations. 

Know Your Users' Needs 

When combining servers, equipment, 
and applications from two or more data 
centers, it is necessary, as part of the plan- 
ning phase, to really know what applica- 
tions run in the different facilities, their 
relationships to each other, and how they 
are tied to business processes. "There might 
be things about the use of applications 



You don't want to move application A 
and leave B until later when application 
A and B require low-latency communi- 
cations to function properly — and sud- 
denly, they are no longer going to be 
in the same data center but are 500 
miles apart." 

Consider Security 

Consolidating data centers often means 
merging different networks with diverse 
security systems and practices. "One data 
center might house Web-facing data, 
while the second might house your back- 
office functions. To maintain security 
when merging the two data centers 
together, it's important to keep the 
two networks segregated," says Dani 
Roisman, senior director of network engi- 
neering and operations for The Planet 
(www.theplanet.com). "Otherwise, public 
ports available on the network switch 
might give visibility to your internal and 
back-office network." 

To keep the different networks secure, it 
is especially necessary to use a robust fire- 
wall for tight network filtering, Roisman 
says. "For segregation, employ a VLAN 
(virtual local-area network), which will 
separate systems with sensitive data from 
the rest of the network," Roisman says. 

Get The Downtime Schedule Right 

Part of the planning process involves a 
lot of preparation for the downtime of 
applications when servers and data are 
moved to a new location. The length of 



Data center consolidation is never easy, 
given the inevitable application downtime, 
logistical planning, and other challenges 
involved in such a project. 



in the enterprise [on an end-user level] 
that you don't really understand, but it 
is crucial to really understand the busi- 
ness requirements as a planning exercise," 
says Nik Simpson, an analyst for the 
Burton Group, a subsidiary of Gartner. 
"You must really understand the infra- 
structure of what you are going to consol- 
idate, the applications running on it, and 
how those applications are connected. 



downtime will vary depending on such 
variables as server types, applications, 
and the physical distances between the 
data centers that are to be merged. "You 
have to have people signed off so they 
know a particular application is not 
going to be available during a period of 
time," Simpson says. "If people know 
beforehand, then you can decide when is 
the best time of the year to do it and 



BONUS TIPS 



■ Do it in stages. Given the 
magnitude of what is involved 
in data center consolidation, it 
helps to make the move pro- 
gressively. "You usually do 
this in stages depending on 
how much cooling and power 
you have in the existing facili- 
ty," says Nik Simpson, an 
analyst for the Burton Group. 
"Moving that new hardware 
and switching over those 



applications can free up some 
more space in the existing 
facility, and you can acceler- 
ate the process as you go on." 

■ Take the eco-friendly 
opportunity. Whether the 
project involves building a 
new data center or you are 
moving servers from a smaller 
facility into an existing site, 
you have the occasion to 



improve efficiencies and lower 
the power consumption of all 
of the equipment that is being 
merged. "If the data center 
manager was given the oppor- 
tunity to consolidate, then he 
wouldn't be doing his job if he 
didn't also take the opportuni- 
ty to make it more efficient," 
says Jeff Lowenberg, vice 
president of facilities for The 
Planet (www.theplanet.com). 



Best Tip: 

Use Virtualization's 
Power 

Most enterprises are at least planning to vir- 
tualize some of their servers at some point, 
but for data center consolidation, the best 
approach is to virtualize the data centers 
involved as much as possible before the 
physical move. "Companies are at various 
stages in virtualization, and very few are 
completely virtualized. But generally, if you 
can, get the virtualization in first," says Nik 
Simpson, an analyst for the Burton Group. 
"Moving virtualized machines is a lot easier 
than moving physical machines." 

Most Practical Tip: 

Get Executives 
On Board 

Data center consolidation is a big project and 
will likely mean some discomfort and tempo- 
rary sacrifices for everyone in all departments. 
To make sure that people are doing what they 
are supposed to do to complete the project, 
an executive with some clout must get behind 
the move. "You need the relevant stakehold- 
ers in the IT organizations and the business 
units and to have high executives buy in on 
this, so if you need to knock heads together, 
then there is someone who can do the head 
knocking," Simpson says. 



when it will cause the least disruption for 
the business." 

It is necessary to plan around "applica- 
tion availability," Simpson says. "You 
almost certainly have to work something 
out to have hardware staged at the new 
site and data synchronized to minimize 
downtime," Simpson says. "Amazon, for 
example, can't just say 'sorry, Amazon 
.com is offline for three days.'" 

Take Distances Into Account 

The physical distances between the dif- 
ferent data centers to be merged represent 
a major factor to consider and will deter- 
mine whether data can be ported to a new 
facility in a few minutes over a network 
connection or servers with the data have to 
be physically transported by truck from 
one location to another. 

"You really have to think about how 
you are going to get data from the old site 
to the new facility," Simpson says. "You 
could be talking about tens, hundreds, or 
thousands of terabytes of data and you 
have to make absolutely sure, that if noth- 
ing else works right, then you still have all 
of the data there." 

For data centers within 125 miles of 
each other, synchronous mirroring over a 
network connection can be used to port 
data to a new facility. However, this 
alternative is not viable over longer dis- 
tances, Simpson says. "For example, if 
data is scattered across the United States 
that has to be consolidated in data centers 
in Chicago and Minneapolis, then there 
are not going to be many of those data 
centers within synchronous mirroring 
range," Simpson says. "So the physical 
proximity of the old facilities to the new 
facility is going to have an impact on 
what options you have. If it takes 10 days 
to sync up data with asynchronous mir- 
roring but you can put the storage on a 
truck and have it there in three days, then 
it is going to make more sense to relocate 
than to replicate." 
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HOW TO 

Create A Hot Aisle/ 
Cold Aisle Setup 

Tap Into More Effective Cooling By Developing 
An Aisle Setup That Works For Your SME 



by Elizabeth Millard 

• • • 

Effective cooling is crucial for any 

data center, and, increasingly, IT managers 
are relying on developing a setup that uses 
HA/CA (hot aisles and cold aisles) to distrib- 
ute cooling in a more targeted way. Here's a 
look at how an SME can create this type of 
system without busting the budget. 

Benefits & Pitfalls 

Before embarking on an aisle setup, it's 
first necessary to determine if the strategy 



Key Points 



• Alternating hot aisles and cold aisles is 
essential to proper thermal management in a 
data center, as it's crucial to measure air 
temperature at the server, storage, and net- 
work level as well as ambient temperatures. 

• One size doesn't fit all for hot and cold 
aisles, and what might work in one area 
may not in another, making planning an 
important part of implementation. 

• The cost of a hot and cold aisle setup 
varies depending on complexity and size 
and could run to the tens of thousands of 
dollars if consultants and new equipment 
are involved. But in general, containment 
systems and gear such as thermal curtains 
can make a strategy more affordable. 



is right for your specific data center and 
to learn the pitfalls that can happen dur- 
ing implementation. 

Alternating HA/CA is essential to proper 
thermal management of the data center, 
according to Kris Domich, principal 
consultant at Dimension Data (www 
.dimensiondata.com). He notes that even 
though it's good practice to monitor the 
ambient temperature within a facility, the 
more important measurement is inlet air 
temperature at each server, storage, or net- 
work device. Cooler, denser air can carry 
away more heat, therefore maintaining cool 
inlet temperatures; this is key to removing 
the amount of heat that can be generated by 
the equipment. 

"Separating the aisles allows data center 
operators to more easily control the mixing 
of hot and cold air and helps to ensure that 
airflow can be directed in a more precise 
manner," Domich says. 

Another benefit is that this type of 
hot/cold tactic makes it easy to predict 
a data center's behavior, adds Sajeel 
Qureshi, vice president of operations at 
Computan (www.computan.com). "You 
can set the cooling temp to be higher and 
reduce energy costs," he says. "Also, it 
allows you to reduce humidity in the facili- 
ty and all costs related with it." There's 
more predictability with HA/CA, allowing 
for more efficient ambient air controls. 

In terms of pitfalls, a common one is rely- 
ing only on aisle separation as the sole ther- 
mal management strategy, Domich says. 
"One must still continue the best practices of 



using blanking panels, sealing around cables 
routed through cut floor tiles, taking care to 
not overdo it with perforated tiles, and 
ensuring that hot air has a dedicated return 
path to the heat exchangers." 

Also, keep in mind that one size doesn't 
fit all, says Peter Sacco, president of PTS 
Data Center Solutions (www.ptsdcs.com). 
What may work in one area may not be 
appropriate in another space. "There are 
few fixes that work for all instances," he 
says. "However, any that reduce air mixing 
and promote effective air management are 
always a good idea." 

Getting Started 

Most data center devices draw cool air in 
from the front device and expel hot air from 
the rear, so alternating the orientation of aisles 
naturally facilitates proper airflow but doesn't 
necessarily guarantee it, notes Domich. 

Several other factors come into play, 
such as convection, obstructions, and air 
pressure. Some devices, such as many net- 
work and storage systems, may have a side- 
to- side airflow profile or may even expel 
hot air out the top of the rack, drawing cold 
air in from the bottom. Domich says, 
"Before choosing any aisle orientation, it's 
important to fully understand the airflow 
characteristics of your equipment, and care 
should be taken not to mix these profiles in 
a given rack or aisle." 

Aisle configuration must be appropriate 
for the air conditioning supply and return 
air configuration to the room, adds Sacco. 
HA/CA can be a very effective method for 
reducing air mixing — the enemy of air con- 
ditioning effectiveness — but only when 
applied with the cooling strategy and air 
distribution methodology. 

"Additionally, containment systems and 
thermal curtains are only effective when used 
the right way," he says. "Otherwise, they can 
hurt more than help. A good, common-sense 
start to understanding the dynamics of proper 
computer room air conditioning is to consid- 
er that it is more about removing heat than it 
is about adding cold." 

He says that adding cold isn't really pos- 
sible because cold is the manifestation of 
the absence of heat. That means only heat 
can be added or removed. "By understand- 
ing this, you can soon realize why strategies 



TOP TIPS 



• Understand the airflow characteristics of 
each piece of equipment; some may have 
hot air vents in the top, while others have 
them at the sides. Take care not to mix 
together these different types. 

• Install sliding or motion-activated doors to 
the facility to regulate temperature and 
block off openings. 

• Make sure there are no obstructions in a 
raised floor; sometimes cabling is wedged 
so tightly into the space that airflow is 
restricted, reducing cooling efficiency. 



such as lowering air temperatures and hav- 
ing [a] CRAC parallel to equipment loads 
are ineffective strategies," he says. 

Toolbox 

Reorienting the aisles in a data center may 
not require new products, but some invest- 
ments may enhance the effectiveness of a 
separation strategy, says Domich. 

If a data center has more than 20 to 30 
racks or cabinets, perform a CFD (computa- 
tional fluid dynamics) study before moving 
any racks. This will provide important data 
on the characteristics of airflow in the room, 
and the information can be used to lay out 
the aisles and may influence how power and 
heat loads are balanced across racks. 

Investing in a standard equipment rack/ 
cabinet may be another worthwhile purchase, 
Domich says. "Standardizing the footprint of 
equipment racks offers immediate and long- 
term advantages. It makes it easier to predict 
the consumption of floor space as equipment 
is added and allows data center operators to 



implement more aggressive thermal manage- 
ment strategies." 

It's also advisable to deploy temperature 
and humidity sensors within racks, especially 
those with medium- and high-density poten- 
tial, according to Domich. Visibility into this 
data, along with trend info, can help data 
center managers be more proactive with 
regard to equipment placement. 

Cost Containment 

Appropriate use of thermal curtains, 
blanking panels, and raised floor grommets 
can cost as little as a few hundred dollars, 
notes Sacco. Containment systems cost 
somewhat more, and consulting services can 
add up depending on the size, complexity, 
and iterations required. "An effective air con- 
ditioning solution, matched to the power den- 
sity deployment strategy for the site, is still 
mandatory and remains the second highest 
cost component of a data center project, next 
to the servers themselves." 

Other measures, such as rack standardiza- 
tion and adding environmental sensors, can 
introduce costs, which vary based on func- 
tionality, adds Domich. CFD analyses by 
consultants, who use temperature, humidity, 
airflow, and pressure sensors to determine 
needs, may be an unexpected budget item, 
but getting the outside help is worth the cost. 

"This relatively small investment in the 
planning and discovery phase will ensure 
that the orientation plan developed is actu- 
ally addressing the current environment," 
Domich says. "It can also prevent other 
costs in the future that might arise from 
ineffective airflow within the data center, 
including the need for facility upgrades." 



Cyber Switching's new ePower family is targeted at data center 
managers searching for greener solutions which integrate rich 
features while providing unsurpassed reliability and great value. 




• Color LCD Touchscreen 

- Enhanced productivity - interactive screen allows for local management 

- Quick and easy setup - configure network access within 5 minutes with no laptop needed 

• Cyber Breaker® the Virtual Circuit Breaker 

- "Trips" an individual outlet when the amperage exceeds a user-defined threshold 
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• Individual Cutlet Power Metering and Control 

- Utility-grade metering and control (±2% accuracy) 
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• Demand/Response Load Shedding 

- Proactively shed loads manually or enroll in AutoDR program 

- Protect your mission-critical applications during Demand/Response events 
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- External peripherals: enviranmental sensors, weh cams, flash drives, hubs, etc. 
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• 60+ High Density PDU Configurations 
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Spam Volumes 
Continue To Rise 

In spite of persistent attempts to neutralize 
spam threats, the overall volume of spam 
continues to grow. Recent data from Postini, 
Google's email security and archiving ser- 
vice, shows that in the first quarter of this 
year, spam volumes increased 6% from the 
same time a year ago. 

Spam levels actually fell 12% from the 
fourth quarter of 2009 to the first quarter 
of this year, Postini data shows, but this is 
likely because of the takedown of several 
significant botnets at the end of last year. 
These botnets included Waledac, Mariposa, 
Zeus, and Mega-D, the botnet responsible 
for contaminating more than 250,000 com- 
puters worldwide. 

According to Jonathan Penn, security ana- 
lyst at Forrester Research, users typically 
encounter URL spam (an email with a Web 
link that leads to a malicious site) or image 
spam (emails that contain an image that 
links to a malicious site). But there are other 
types, too. "Other common spam relies on 
social engineering, fooling you to open the 
mail and click on links. They often do so by 
pretending to be an invoice for something 
you didn't purchase, a package you never 
sent or was never sent to you, etc.," Penn 
says. "IVIuch of this is designed to get you to 
a Web site that will try to push malware 
onto your machine," he says. 

Image Spam Rising 

image spam is also on the rise. Postini's 
data shows that spam has seen a 30% 
increase in the size of messages, pointing 
to a rekindling of image spam. According 
to Postini, spammers will use almost any 
means necessary to trick users into click- 
ing links, including solicitations for pharma- 
ceuticals, news about celebrities, or even 
tragedies such as the recent Haiti earth- 
quake crisis. 

The cause of continued spam growth can 
be largely attributed to the fact that spam- 
mers are becoming more sophisticated 
in their attacks. "Criminal networks are 
becoming more resilient to disruption from 
law enforcement activity," Penn says. 
"Criminals are moving to Web site compro- 
mise and social networking vectors, which 
are far more efficient than phishing attacks 
in reaching large numbers of people and 
compromising their machines or online 
accounts," he says. 

To combat the ever-growing volume of 
spam, Penn suggests that small to midsized 
companies leave email filtering to a profes- 
sional service provider to save on cost and 
effort in keeping up with spammers' chang- 
ing rules. 

by Kris Glaser Brambila 
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Cool Down 
A Data Center 

Use Passive Cooling To Improve Energy Efficiency 



by Elizabeth Millard 
• ■ ■ 

As ENTERPRISES LOOK TO reduce energy 
costs and improve energy efficiency and 
environmental friendliness, one element 
they are considering is implementation 
of some form of passive cooling. These 
strategies work with airflow to boost 
efficiency, lowering the need for addi- 
tional CRAC units or air conditioners. 
However, it's not always so simple to 
just put in a few extra ducts. Passive 
cooling involves several tactics and some 
extra effort and time from IT staff, but 
the payoff could be a lower-cost center 
that is cooled properly. 

Defining Passive 

Passive cooling techniques remove hot 
air by combining the force of natural 
exhaust air with ducted, deliberately 
placed paths that direct hot air to a dedi- 
cated area, such as a ceiling plenum or 
other return pathway, according to Kris 
Domich, principal consultant at Dimen- 
sion Data (www.dimensiondata.com). 

He adds that this exhaust air is typical- 
ly directed out of the top of equipment 



require the integration of additional equip- 
ment and can actually lower costs if 
implemented well. 

Benefits & Implementation 

McKinney notes that one example 
might be rack enclosure systems outfit- 
ted with a "chimney" attachment that 
evacuates the hot air above the ceil- 
ing, which prevents the hot air from 
mixing with the cold air in the room 
and lowering the ambient temperature. 
He says, "Other techniques include 
ensuring that 'dead' space between 
and even inside rack enclosures is elimi- 
nated so as to reduce the possibility of 
what amounts to hot air whirlpools in the 
data center." 

One of the cheapest ways to imple- 
ment passive cooling is through the use 
of drop curtains, says Travis North, ther- 
mal design manager of Chatsworth 
Products (www.chatsworth.com). "Ba- 
sically, you're just creating a barrier," 
he says. "The two things you're fighting 
are recirculation and bypass — those are 
your enemies, and you attack them in 
multiple ways." The curtains are made of 



might have space on each side, and if 
there isn't an air dam to block the flow, 
air can stream around and go toward the 
cooling units. "This situation lowers the 
exhaust temperature, which you don't 



Key Points 



• Passive cooling can be achieved through 
numerous techniques, all aimed at 
increasing efficiency of cooling systems 
rather than introducing more cold air into 
an environment. 

• Drop curtains and removable walls can 
help passive cooling strategies, but be 
careful that there's also an effective hot 
air return for air evacuation. 

• Passive cooling strategies can be imple- 
mented in a phased fashion that limits 
operational interruptions. 



"With passive cooling, you're not nec- 
essarily introducing more cold air into 
an environment, you're just making the 
cold air you already have work better." 



-Venyu's Stephen McKinney 



cabinets, making use of the natural rise of 
heat — giving it the "passive" designation. 
Cool air is supplied to the front of the cab- 
inets, usually through existing perforated 
floor tiles. In some cases, the cold air is 
also directed to the entire elevation of the 
cabinets' inlet sides. 

"The primary difference between 
passive cooling and other cooling 
techniques is the use of dedicated evacu- 
ation pathways for hot air, as well as the 
use of the natural physical forces of 
the exhaust airflow to move the air," 
says Domich. 

Passive cooling can involve a variety 
of techniques used to help increase effi- 
ciencies of existing cooling systems, 
adds Stephen McKinney, vice president 
of operations at data protection firm 
Venyu (www.venyu.com). "The big dif- 
ference is that with passive cooling, 
you're not necessarily introducing more 
cold air into an environment, you're just 
making the cold air you already have 
work better," he says. 

With the increase in rack density and the 
rising cost of power in many areas, pas- 
sive cooling is likely to gain more adop- 
tion in the near future because it doesn't 



flexible, clear PVC material and can be 
fitted to existing data center ceilings rel- 
atively easily, although there is usually 
a small amount of airflow leakage that 
can result when compared to a fixed, 
solid wall. 

Recirculation is air from the hot aisle 
drifting into the cold aisle, he says, and 
bypass is air going around the equip- 
ment. For example, a server in a rack 



want to do," says North. "The trick is to 
have as high of an exhaust temperature 
as possible, a high intake temperature, 
without having it be too high, to the 
point where your server fans start spin- 
ning up." 

The best technique to create contain- 
ment is isolation, he says. This can be 
done with a wall, but drop curtains pro- 
vide a more flexible option: "If you put 
curtains in a hot aisle, that's going to 
funnel hot air back and eliminate a sig- 
nificant portion of recirculation." 

Domich adds that making significant 
upgrades or changing mechanical cool- 
ing plants is not only costly but also 
involves demolition and construction, 
which can cause interruptions of normal 
data operations. He says, "That alone can 
be a showstopper; however, doing noth- 
ing can also put limitations on an organi- 
zation by not permitting it to make use of 
better server and storage technology." 
Passive cooling techniques, on the other 
hand, usually do not require major 
changes to a data center and can be 
implemented in a less intrusive, phased 
fashion that limits interruptions to data 
center services. 



Right For Your Center? 

To determine if passive cooling is right for a specific center, it's useful to first take readings from 
the center to see if there's a pending or existing cooling problem, notes Kris Domich, principal 
consultant at Dimension Data (www.dimensiondata.com). He recommends taking readings from 
multiple physical areas within the data center. 'This means you should pay special attention to 
individual inlet air temperatures, even more so than ambient temperature readings," he states. "If 
a determination is made that additional cooling capabilities are needed, quantify the necessary 
amount and explore all options — such as upgrade existing, retrofit a new type of system, or add 
passive capabilities." 

He adds that passive cooling makes use of the existing cooling system; as a result, it's not 
going to increase existing theoretical maximum cooling capacity, but it can increase the effi- 
ciency and effectiveness of the existing system. In addition, keep in mind that extra costs 
could be involved — data centers without ceiling plenums, for example, may require more 
ductwork, so any ROi measurement should take those kinds of changes into consideration. 
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by Tessa Warner Breneman 



An Affordable, Energy-Efficient, Ceiling- 
Mounted A/C Designed For Server Rooms 



By now you undoubtedly know that, 
with all your servers and other machines 
running nonstop, it's easy for your data 
center or server room to reach tempera- 
ture levels high enough to damage heat- 
sensitive equipment. Because damaged 
equipment is costly to fix and could 
result in data loss, you need a cost-effec- 
tive cooling solution to address tempera- 
ture issues in your data center. 

The MovinCool CM25 offers a total 
cooling capacity of 25,000BTU/h, making 
it the industry's first ceiling-mounted, self- 
contained air conditioner with that high of 
a cooling capacity, and its $6,995 price tag 
is lower than conventional solutions such 
as precision cooling systems. The CM25 
also provides a high sensible cooling 
capacity of 18,900BTU/h and is made 
specifically for server rooms and other 
environments with dense heat loads. The 
air conditioner boasts a SEER (Seasonal 
Energy Efficiency Ratio) rating of 14, due 
in part to energy-saving elements such as 
its variable-speed inverter compressor and 
inverter fan motors. The CM25 also boasts 
green features such as R-410A refrigerant 
and RoHS compliance. 

With a built-in mounting bracket, 
flanges, and vibration isolators, the CM25 



MOVINCOOL 

THE #1 SPOT COOLING SOLUTION 



is easy to install into any environment 
with all the standard tools you likely 
already have. Just 20 inches high, the 
CM25 is designed to fit above drop ceil- 
ings and in server rooms with limited floor 




MovinCool CM25 

A ceiling-mounted air conditioner that provides an ener- 
gy-efficient cooling solution for data centers, server 
rooms, and otiier environments with high heat loads. 
$6,995 

space. And because it is self-contained, 
the CM25 won't need refrigerant connec- 
tions, further reducing installation costs. 

The wall-mounted controller, which 
comes standard on all CM25s, provides 
advanced communications, monitoring, 
and self-diagnosis, so it's easy for IT 
personnel to manage. Plus, it works with 
your fire alarm controls and connects to 
the building control system for safe and 
simple management. 



(800) 264-9573 
www.movincool.com 
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News 




I Investments In Healthcare IT Drop 

A recent report from Dow Jones Venture- 
Source indicates thai inealtincare IT invest- 
ments dropped by 20% between tine first 
quarter of 2009 and ttie first quarter of tills 
year, in the first quarter of this year, 141 
deals were made totaling $1 .2 billion, while 
the 130 deals in the first quarter of 2009 were 
worth $1.5 billion. In this most recent quarter, 
62 of the deals involved medical devices and 
equipment for a total of $439 million. Medical 
software and information services saw eight 
deals for $53 million, which was a 77% drop 
in the amount of capital from 2009. 

I Symantec Buys PGP, Guardian Edge 

Symantec recently acquired two email and 
data encryption companies, PGP and 
GuardianEdge. The acquisitions will give 
Symantec additional weight in the data pro- 
tection and encryption arena, including tech- 
nologies such as full disl<, email, file, and 
smartphone encryption. Per the agreement, 
Symantec will pay $300 million in cash for 
PGP and about $70 million in cash for 
GuardianEdge. Symantec says that with both 
new additions on board, it can offer a more 
comprehensive encryption plus data loss pre- 
vention solution. Symantec says it also has 
plans to standardize both additions' features 
in the PGP l<ey management platform and to 
integrate the PGP key management platform 
into Symantec's own 
Protection Center. 

I Former 
Network 
Admin Found 
Guilty In 
Password Case 

A San Francisco man 
employed as a network administrator 
was recently found guilty of denying 
computer services when he refused to 
give his boss network passwords 
to San Francisco's 
FiberWAN, an act that 
violated California's com- 
puter crime law. Now 
that the verdict is in, 
Terry Childs will spend a 
maximum of five years in 
prison, though one of Childs' 
attorneys says Childs will appeal the result. 
Childs' main defense was that he was con- 
cerned with security and was only doing his 
job. In the end, the act left the city's Fiber- 
WAN without administration for 12 days. 

I Oracle Buys Phase Forward 

Oracle will buy Phase Forward, a software 
developer for life sciences and healthcare 
organizations, in a cash deal worth $685 
million. Phase Forward shareholders will 
receive $17 per share. The company 
expects the acquisition to boost its Oracle 
Health Sciences division. With Phase 
Forward's background in clinical trials, 
Oracle customers can expect to more effec- 
tively capture, access, and share data 
securely. Oracle has acquired many compa- 
nies as of late, including Sun Microsystems 
and Relsys (a Phase Forward competitor 
and drug safety software maker); however, 
this latest acquisition better positions the 
company in the healthcare market. 




NETWORKING & VPN 




HOW TO 



Track & Monitor 
Wi-Fi Networks 

Keep Them Strong & Secure 



by Brian Hodge 
• ■ ■ 

Wireless connectivity doesn't just 
provide employees with freedom out- 
side the workplace. It also gives them 
internal mobility they wouldn't have 
if they were tethered to a physical net- 
work connection at their desks, and when 
it means a tradeoff, mobility often 
trumps speed. 

However, the nonphysical nature of wire- 
less connectivity creates its own subset of 
challenges in overseeing your network to 
make sure it's running smoothly. 

Monitoring Wi-Fi Is An Evolving Need 

According to Chris Kozup, senior 
manager of mobility solutions at Cisco 
Systems (www.cisco.com), Wi-Fi has 
evolved from a casual convenience to a 
controller-based infrastructure scaled 
throughout an entire enterprise. The 
802.1 In standard furnishes sufficient sig- 
nal strength to operate media-rich appli- 
cations wirelessly. 

The downsides of this growth and 
performance are crowded frequency 
spectrums and a greater possibility for 
security breaches. 

"Now we are at a new point, when tak- 
ing our wireless networks to the next 
step means really knowing what is oper- 
ating in the RF environment in order 
to protect and manage performance," 
Kozup says. "For Wi-Fi networks to 
become truly mission-critical, unexpect- 
ed issues that come from operating in the 
shared RF spectrum, like wireless in- 
terference from other devices, cannot 
be tolerated." 

Thus it's becoming necessary for IT to 
utilize always-on monitoring that can 
take corrective action to manage interfer- 
ence and furnish information on wireless 
device activity. The cost of ignoring this 
could be performance instability, client 
disconnects, difficulty in tracking prob- 
lems, and an inability to run crucial 
applications on Wi-Fi. 

The Tools For The Job 

The tools used for managing a Wi-Fi 
network must accomplish two primary 
goals: Make sure users have the perfor- 
mance they need and keep the RF spec- 
trum clean and secure. Fortunately, 
everything you need probably came with 
the hardware. 

"The monitoring tools that come with 
most Wi-Fi routers and access points are 
viable out of the box," says David Wilson, 
director of IT Services at Vector CSP 
(www.vectorcsp.com). "We also use a 
number of products that are native to the 
network and to our firewall." 

Wilson sees no added value in sup- 
plementing these with third-party prod- 
ucts, adding that as long as the furnished 
tools are configured and maintained 
carefully, there's little danger of any 
unwanted activity. 

However, enterprises that are pushing 
the wireless envelope may need more 
muscle to keep their systems free of 
RF interference. 



"For organizations that need to deploy 
latency-sensitive applications like voice 
and video or business-critical applica- 
tions like retail PoS applications, any 
performance variation has business 
impact," says Kozup. "A combined hard- 
ware/software solution is needed, one 
that is integrated into the network infra- 
structure itself." 

What To Look For 

The dual objectives of performance 
and security break down into several 
factors to watch for: unauthorized 
access, performance dips, unanticipated 
network changes, sources of interfer- 
ence, and devices operating on standard 
and nonstandard wireless channels that 
could compromise security. The prior- 
ity each is accorded is typically deter- 
mined by the nature of the business and 
its infrastructure. 



Key Points 



The goal of monitoring is to provide net- 
work users with the performance they 
need and keep the RF spectrum clean 
and secure, and everything you need 
probably came with the Wi-Fi hardware. 

IVIain factors to monitor for are perfor- 
mance dips, unauthorized access, net- 
work changes, interference, and devices 
that could compromise security. 

In time spent, the bulk of Wi-Fi monitoring 
is simply about maintaining availability. 



According to Wilson, the most fre- 
quently stolen asset is Internet access, 
taken by someone with a little hacking 
skill looking for a free ride. This can be 
thwarted with strong encryption backed 
with Windows network security and 
blocking unauthorized DHCP addresses 
that show up. 

Rogue access points may also merit 
concern. "Some users with the best of 
intentions may inadvertently create an 
environment where things like man-in- 
the-middle and honeypot attacks would 
cause some havoc," says Kozup. "There 
are ways to make the client think they 
are connecting to the corporate net- 
work/AP when in reality they are con- 
necting to rogue APs that have parked 
themselves in the middle." 



However, although security is vital, that 
doesn't mean you'll spend much time 
dealing with breaches. 

"In honesty, it's about 95% availabili- 
ty," Wilson says. "I have to regularly 
check all of the networks for availability, 
particularly since they can show up as 
being good strength, and connect, but 
without actual access." 

Automated alerts can shoulder some of 
the monitoring burden, as long as automa- 
tion doesn't replace due diligence. 

"You still have to check the logs 
for anomalies," Wilson says. "I have 
alerts automated for detected intrusions, 
but I never trust those implicitly. I 
do a weekly check of access logs and 
DHCP leases." 

Keep Employees 

On The Approved Network 

In an area of overlapping networks, 
employees may be tempted to cherry- 
pick their connection — for instance, a 
different network within the enterprise or 
an unprotected hotspot from the coffee 
shop next door — to engage in personal 
pursuits. In general, this is something to 
be discouraged, although it imposes its 
own limitations. 

"This is where the Windows Domain 
and network come in," says Wilson. 
"While they'd still be able to check and 
send email, the minute any of them tried to 
print or work off of the shared network 
drives, they'd fail." 

It may also be helpful to communicate 
with employees, making sure they under- 
stand that leaving their approved network 
can waste resources, as it may give the 
appearance that they've lost access and IT 
needs to determine why. 

On the other hand, if an employee 
is mobile enough to legitimately need 
to switch networks, Kozup suggests 
equipping his device with a client 
security application that will ensure a 
secure connection to the enterprise 
regardless of where it goes. It's "like a 
permanent VPN that goes with the user 
wherever he or she takes the laptop, mak- 
ing public hotspots just as safe as the 
office WLAN." 

Once It Works, Don't Fix It 

Many of IT's activities and policies 
need periodic review to determine where 
changes may be necessary. With monitor- 
ing a Wi-Fi network, what proves to be an 
effective approach will probably need no 
further refinement. 

"If technology changes radically, then a 
revamp of policies might be in order," 
says Wilson. "For the moment, it's enough 
to maintain security and keep your eyes 
open. The majority of Wi-Fi network 
intrusions are due to administrators who 
don't know how to configure security or 
don't understand the issues." 

Beyond that, reliable password protec- 
tion, tight encryption, and a well-main- 
tained network security program should 
meet the needs of most networks, lii 



Analyze Your Wi-Fi Monitoring Needs 



Wi-Fi monitoring methods 
should vary to fit the desired 
outcome. According to 
Cisco's (www.cisco.com) 
Chris Kozup, a holistic 
approach to WLAN manage- 
ment would suggest at least 
three situations for different 
styles of monitoring: 



Ongoing threshold and 
event alerts for common 
signs of problems. 

Periodic project-specific 
monitoring such as baselin- 
ing for deploying a new 
application or trend report- 
ing for network optimization. 



• On-demand real-time moni- 
toring in response to a help 
desk call or to troubleshoot 
a problem. 

Tailor your approach appro- 
priately, and you can always 
be sure of using the right 
methods for the job. 
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THREE QUESTIONS 



Remote Connections 
For Rugged Environments 



Fortress Technologies Pushes Wireless LANs Out The Door 




FORTRESS 

TECHNULUGIES 



® 



by Daniel P. Dern 

Wireless LANs aren't just useful in 
the office, home, and coffee shop; in the 
field, where ranning Ethernet cabling is dif- 
ficult or simply not possible, they're even 
more useful. For many civilian and military 
agencies, the success of an operation today 
may hinge on having local connectivity, 
along with backhaul to the Internet and/or 
the organization's main servers. 

Fortress Technologies (www. fortress 
tech.com) is one company offering rug- 
gedized secure wireless LAN/backhaul 
solutions for deployable networks, outdoor 
network extensions, and vehicle-based 
networks, and its Secure Wireless Bridges 
provide FlPS-validated secure voice, 
video, and data service. 

Fortress products can be found in 
demanding global environments providing 
disaster recovery and continuity of opera- 
tions, perimeter and border security, 
deployable communications, outdoor 
wireless networks, wireless sensor net- 
works, wireless video surveillance, and 
vehicle networks. Jeff Bradbury is vice 
president of marketing at Fortress. 



■ What are the biggest IT-related 
issues facing today's small to 
midsized enterprise? 

"Security for your data," says Bradbury. 
"You have to ensure that data is accurate, 
timely, and free from outside interference 
and manipulation in the course of moving 
it from the enterprise systems to the users 
and back; [that your] information is 
accessed only by the appropriate people 
and for the appropriate elements and 
hasn't been tampered with; and that only 
authorized parties have made any changes 
or additions." 

This is more important — and challeng- 
ing — than ever, says Bradbury, due to the 
growth of rules and regulations, the 
sophistication of tools available to male- 
factors, and the use of cloud services out- 
side organizations' network perimeters. 

■ What should Processor readers know 
about your company's products? 

Fortress Technologies' products are 
designed for use in military vehicles, 
police cruisers, service trucks, and mobile 
command vehicles and can be found 



everywhere from emergency response and 
relief workers for hurricanes, earthquakes, 
and natural disasters to land, sea, and air 
battle environments. 

"Our products are used in several 
National Guard units, including Texas, 
where we were used extensively in the kits 
for response to Hurricane Rita," says 
Bradbury. "They surged into the disaster 
areas and used our devices to set up the 
command center." 

Fortress' products include its Secure 
Wireless Bridge, Tactical Mesh Point, 
Infrastructure Mesh Point, FastPath Mesh, 
Vehicle Mesh Point, Security Controllers, 
and Secure Clients. 

"We sell wireless devices specifically 
designed for DoD and emergency respon- 
der environments," says Bradbury. "The 
form factors we produce are specifically 



created to serve these users and come 
with integrated security able to meet these 
users' needs." 

Fortress' most popular product is the 
Fortress ES520 Secure Wireless Bridge, 
according to Bradbury. "The ES520 is our 
Swiss Army Knife solution," he says. 
"People like it for emergency kits, along 
with a tripod and small Cisco switch 
into a 40- to 50- 
pound case. The 
National Guard, 
Army, and Marine 
Corps all use them. 
It has a built-in 
eight-port Ether- 
net switch, so you 
can run a command 
post off it. It gives 
50Mbps through 
two radios — enough for several video con- 
ferences or [to] run a robust operations 
center — and it weighs under 7 pounds [and] 
can go anywhere with you." 

■ What makes your company unique? 

"We design, specify, and manufacture 
all our products ourselves, in the United 
States, to ensure we can control the manu- 
facturing process and supply chain," 
Bradbury says. "This allows us to own 
nearly all of the IP that goes into making 
our products and allows us to outperform 
those other competitors that are limited to 
using off-the-shelf parts. Additionally, by 
operating this way, we can ensure our 
product does not contain any corrupted 
components that might offer a way for 
adversaries to attack the systems and users 
we support." 



Cloudbursting 

The Killer App For The Cloud? 

The advent of cloud computing 
promises to change the face of the IT 
industry forever. Just like electricity 
evolved from onsite generation to provi- 
sion by large utilities on a pay-as-you- 
use basis, IT is rapidly evolving from an 
in-house function to one that is provided 
as a service from the cloud. 

Virtualization is just one of the critical 
technologies enabling this makeover. 
Early cloud-based infrastructures focused 
on discrete functions as the driver for 
cloud-based business models, but as vir- 
tualization technology has matured, a new 
killer app has surfaced: cloudbursting. 

Cloudbursting lets enterprises quickly 
expand into the cloud, taking advantage 
of readily available compute, storage, and 
network resources to meet short-term or 
infrequent needs. Cloudbursting makes it 
possible to bring virtual machines up on 
demand to support a variety of needs. 

The primary value propositions of 
cloudbursting are the flexibility to provi- 
sion resources as needed on-demand, the 
ability to offload most infrastructure man- 
agement issues to third parties, and the 
ability to fund the services on a pay-as- 
you-go basis from operating, not capital, 
budgets. Here are three likely use cases: 

Disaster recovery and business conti- 
nuity. Cloudbursting, through its ability 
to quickly provision large numbers of vir- 
tual servers, gives end users the ability to 



restart critical business services on appli- 
cation servers in response to disasters or 
other outages. Application failover tech- 
nologies can help make these recoveries 
predictable, reliable, and low-risk. 

Administration. Most enterprises have 
a test environment for maintenance and 
other purposes. This infrastructure is non- 
critical but provides value for keeping 
production running. Cloudbursting can 
offer the same support an in-house test 
environment does without the infrastruc- 
ture management headaches and costs. 

Production. Given easy access to elas- 
tic IT resources, enterprises can supple- 
ment production with cloud resources, 
bringing up additional application servers 
within the cloud to meet demand without 
having to expand in-house infrastructure. 

When evaluating the viability of cloud- 
based services, be realistic. If you're 
considering using them as a more flexible, 
lower-cost substitute for services you pro- 
vide in-house, you already have a set of 
functional security, resiliency, scalability, 
and performance metrics against which to 
compare cloud offerings. If you're think- 
ing about using them to accommodate 
new services, think through your require- 
ments. Look for service-level agreements 
and other guarantees from cloud providers 
and understand exit strategies in case your 
foray into the cloud is not performing to 
your expectations. 
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American Portwell Technology CAD-0205 



NEW PRODUCT 



by Marty Sems 



ighty Mite For A Range Of Security Roles 



a little bit of space and a little bit of 
power can pay big dividends, according 
to American Portwell Technology. The 
new CAD-0205 desktop network appli- 
ance, an ultra low-voltage model, gives 
small and medium-sized enterprises a 
surprising amount of flexibility in a less 
than 30-watt package with a mere 7.5 x 
5.9 X 1.65-inch footprint. 




American Portwell Technology CAD-0205 

Compact and versatile security appliance with an Intel 
Atom processor. 

"With the latest Intel Atom processor 
N450 (1.66GHz with 512KB of cache), 
Portwell designs the CAD-0205 smaller 
than previous products," says Product 
Marketing Manager Mark Huang. "It is a 
power-saving solution . . . [that] can 
reduce electricity costs and provide great 
performance per watt." 

SMEs can set up the CAD-0205 in 
a number of roles, including as a se- 
curity platform compliant with HIPAA, 



f) Portwell 




Sarbanes-Oxley, and PCI DSS. It's 
equally at home providing UTM protec- 
tion (including firewall and anti-malware 
functions) to the network as it is at filter- 
ing content and detecting and preventing 
intrusion attempts. The appliance is also 
suitable for rear echelon duty monitoring 
the network, routing packets, handling 
secure VPN communications, balancing 
loads, streaming files, and applying QoS 
rules to traffic. 

The REACH- and RoHS-compliant 
unit is also available with a dual-core 
Atom D510 with a 1.66GHz clock speed 
and 1MB of cache as well as with a sin- 
gle-core Atom D410 running at the same 
speed but with half the cache. The CAD- 
0205 has a Mini PCIe slot, which opens 
up interesting possibilities involving 3G, 
4G, or Wi-Fi connectivity through add-in 
adapter cards. 

With support for a 2.5-inch SATA 
HDD or SSD and CF, the compact CAD- 
0205 can scale up to 2GB of RAM. 
Connection-wise, it supports a quartet of 
Gigabit Ethernet ports, an RS-232 RJ-45 
console jack, two USB ports, a VGA out- 
put, and dual bypass segment pairs. The 
wall- or rack-mountable CAD-0205 has 
an IA-64 architecture, and IT staff can 
customize the device's front panel. 



(510) 403-3399 
www.portwell.com 
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I IBM Acquires Cast Iron Systems 

IBM announced its acquisition of privately held 
Cast Iron Systems, which specializes in cloud 
application integration services to help compa- 
nies connect on-premises systems to cloud- 
based platforms. The addition of IVIountain 
View, Calif., -based Cast Iron will allow IBIVI to 
expand its cloud integration offerings, enabling 
customers to build hybrid clouds made up of 
on-premises applications, public cloud plat- 
forms, and private cloud deployments. IBM 
says it expects the cloud computing market to 
increase at a compound rate of 28% annually, 
which would bring 2008's $47 billion to $126 
billion by 2012. The company did not disclose 
financial terms of the deal. 

I DHHS Awards $220 Million In Grants 
For Health IT 

The federal government, and specifically the 
Department of Health and Human Services, 
announced plans to award $220 million in 
grants to 15 communities across the United 
States. The program is funded by the American 
Recovery and Reinvestment Act, which passed 
last year. These "Beacon Communities" will 
become examples of how health IT could 
improve health care. 
Health IT is expected 
to coordinate patient 
care, deliver lower 
costs, and create effi- 
cient emergency care 
through the use of 
electronic health rec- 
ords. The communities were chosen from 130 
applicants; each community will receive about 
$15 million and has specific, measurable goals 
to improve patient care. 

I Report: Changes Needed 

To Attract Next-Generation IT Staff 

Young IT workers in the federal government 
are extremely in-demand, and the government 
needs to make concessions to get and keep 
them, according to a Defense Department 
report. It states that 63% of the federal IT 
workforce is nearing retirement, and 17- to 
44-year-olds are seriously underrepresented. 
Fewer younger workers are studying IT, and 
the ones who are don't stay at their jobs long 
before moving on. To remedy the situation, the 
report suggests empowering young workers, 
providing regular assessments and feedback, 
offering performance awards, adopting the lat- 
est social media technologies, and emphasiz- 
ing early responsibility. 

I Apple's Market Cap 
Exceeds Microsoft's 

As calculated by the S&P, Apple's market cap 
rose to $241 .5 billion, which is higher than 
Microsoft's $239.5 billion, according to 
Marketwatch.com. The market cap is a metric 
that is calculated by taking the total value of all 
outstanding shares times the price of the stock, 
to represent the total value of all outstanding 
shares. In a way, it measures how much the 
market believes the company is worth, rather 
than a single measurement of the organiza- 
tion's assets and liabilities. When calculating 
the market cap that includes shares held by 
investors that aren't actively trading, though, 
Microsoft's lead jumps by up to $275 billion. 

I SAP Profit Leaps In Q1 

On a year-over-year basis, SAP's post-tax 
profit nearly doubled in the first quarter of the 
calendar year, according to the company's 
preliminary results. The 97% bump to $387 
million only slightly overshadowed a 94% 
gain in basic earnings per share (33 cents) 
on an annual basis. Revenue from software 
and related services increased 12% year 
over year to $1 .95 billion, or about $2.62 bil- 
lion, the company says. SAP reduced head- 
count a year ago, thus incurring restructuring 
charges in the first quarter of 2009 that had a 
significant impact on that quarter's results. 
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Make Sense Of Your 
Virtual Environments 

HyTrust Appliance 2.0 Makes It Easier To Manage Multiple Virtual Hosts & Machines 



by John Brandon 
ViRTUALIZATION IS ONE OF THE MAJOR 

data center innovations of the decade. In 
the next few years, the concept will expand 
even further — user account virtualization, 
storage, even smartphones will benefit from 
virtualization in one form or another. This 
abstraction of software from the hardware 
layer has several proven benefits, including 
better scalability, but one lingering pitfall: a 
new management layer that can cause con- 
sternation for smaller enterprises. Add to 
this the greater need for compliance adher- 
ence and policy controls in a virtual envi- 
ronment and some SMEs have balked at the 
idea of creating a virtual infrastructure, no 
matter how beneficial. 

HyTrust Appliance 2.0 
(www.hytrust.com) is a key 
component in helping move to 
a virtual infrastructure without 
the new management over- 
head. The appliance provides 
universal access control, easier 
policy management, VMware 
hypervisor hardening, audit 
logs, and many other virtual- 
ization management controls 
that can not only help with 
infrastructure today but pre- 
pare an SME for even more of 
the changes in data center vir- 
tualization to come. 

"We have focused on enter- 
prise scale with an appliance 
that is a single point of control 
for hypervisor access control 
in order to address the needs 
for compliance, separation 
of duties, and operational 
disciplines," says Eric Chiu, 
founder and CEO of HyTrust. 
"The appliance comes in a virtual appliance 
form factor that sits between the network 
traffic and the VMware control center." 

A Holistic Approach 

According to Chiu, a key differentiator 
that makes the HyTrust Appliance stand out 
is that it provides more holistic control than 
an appliance dedicated to specific functions. 
For example, data center managers can con- 
trol access such that an IT manager in the 
accounting department only has access 
to manage the development servers for 
accounting and not every other department. 
This means no accidental changes when a 

HyTrust Appliance 2.0 
Features 

• Holistic control where changes are repli- 
cated through an entire infrastructure 

• Creates audit logs and can be used to 
demonstrate that auditing exists 

• Includes a powerful search engine for 
finding templates, logs, and policies 

• Fits in the virtual infrastructure between 
VIVIware and network access 



manager or technician has access to the 
entire infrastructure. 

"With the HyTrust [Appliance], you can 
give that administrator access to only the 
commands he or she can template, which 
prevents [an] accident that allows the admin 
to gain access to a resource they should not 
be able to control," Chiu says. 

The holistic nature of the appliance 
comes into play because the HyTrust 
Appliance also does audit logging, policy 
enforcement, and many other infrastructure 
control options beyond just user account 
control. Chiu says the product acts as a 
proxy for all management traffic, logging at 
a granular level that can even monitor time 
and date, the object being managed, changes 
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Virtualization Under Control 




Additionally, the appliance supports a 
remote API so that managers can tap 
into the appliance from any other office 
to run administrative tasks and create 
automated functions. The new version 
also has a built-in search engine that 
allows managers to search company-wide 
for all virtual machine policies, templates, 
logs, and objects to make changes and 
monitor controls. 

Chiu says about two-thirds of HyTrust 
customers fall into the SME category and 
tend to have many of the same needs as a 
larger enterprise but lack the dedicated staff 
to ensure policy controls. The appliance has 
automated controls for complying with 
HIPAA, PCI DSS, and other regulations. 

Not only are the policy man- 
^ agement features available, 

tl Chiu says, but managers can 
also create audit logs to show 

I that the controls exist and are 

being used, which is important 
for legal discovery. 

"The HyTrust Appliance 
automates many of the ele- 
ments of security management 
for those companies that do not 
have 10 or 20 VMware experts 
at their disposal," says Chiu. 
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HyTrust Appliance 2.0 has an easy-to-navigate user interface to further simplify 
virtual machine management. 



to the host environment, hypervisor harden- 
ing, and the custom templates used for con- 
figuring virtual machines. 

"This helps address the needs of a large 
enterprise with thousands of hosts and tens 
of thousands of virtual machines," Chiu 
says, adding that scalability is also impor- 
tant for smaller companies with fewer than 
1,000 employees because they can benefit 
from the management and monitoring with- 
out having to hire a dedicated technician for 
these manual tasks or work with an outside 
consultant who helps make sure a data cen- 
ter complies with regulations. 

Other SI\/IE Benefits 

Beyond better management and scale, the 
appliance is also well suited for helping 
with other complex virtual infrastructure 
tasks. Chiu says the HyTrust Appliance pro- 
vides better performance for virtual ma- 
chines and uses a federated model where 
you can use the appliance to manage a dis- 
tributed infrastructure — say, one that has 
multiple servers scattered in various geo- 
graphic locations at branch offices. When 
used in this model, the changes you make 
with templates and policies for your virtual 
environment are replicated across the entire 
company for all virtual machines, not just 
the local instances. 



Slim Competition 

Although it's possible to 
gain some of the same benefits 
of better virtualization man- 
agement by using a more man- 
ual approach and installing 
appliances that address specific 
management chores, Chiu says 
there are no appliances current- 
ly available other than the 
HyTrust Appliance that ad- 
dress the full spectrum of man- 
agement tasks. 

Chiu adds that HyTrust has close ties with 
VMware and even has source code-level 
access to APIs and is the only tech start-up 
with this level of partnership. HyTrust also 
has unique access to Cisco products. 

These partnerships, combined with the 
appliance's ease of use and comprehensive 
feature list, make it an ideal solution for an 
SME trying to navigate the complex world 
of virtual infrastructures while adhering to 
the many policies and compliance rules that 
govern data center operations. 

HyTrust Appliance 2.0 



(650) 681-8100 
www.hytrust.com 

Description: Policy management appli- 
ance for virtual infrastructures to help 
monitor, manage, and control a virtual 
infrastructure, even in a geographically 
dispersed environment. 

Interesting Fact: HyTrust Appliance 2.0 
scales from just a handful of virtual hosts 
and machines at a small company up to 
many thousands at a large enterprise, giving 
companies room to expand easily. 
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Inside Google's 
Ultra-High-Speed Plans 

How The Online Giant's Fiber Project Could Change The Future Of Internet Access 



by Christian Perry 
• ■ • 

As THE SCRUTINY intensifies over the 
United States' inability to keep up with the 
broadband efforts of other countries, a 
potential savior has emerged. With its 
upcoming Fiber For Communities project, 
Google will deliver Internet connections of 



Key Points 



• Google's Fiber For Communities project 
will deliver speeds of more than 1 Gbps to 
one or more trial locations as part of its 
effort to improve broadband penetration in 
the United States. 

• The project's huge network pipeline will 
accommodate a range of applications that 
can overwhelm current networks, such as 
high-definition video streaming and real- 
time multimedia collaboration. 

• Although Google is mum on plans following 
the trials, experts predict the trials will help 
to spur content providers to provide full net- 
work delivery of all content in the future. 



more than IGbps to one or more trial com- 
munities, in turn spawning hope across the 
rest of the country that ultra-fast broadband 
could soon be a reahty for almost everyone. 

"The Google Fiber project will be an 
important development in the future of 
communications. In the initial phase, only a 
small impact will be felt, but if successful, 
it will serve as a proof-of-concept for how 
the Internet, and especially ultra-high-speed 
broadband, can be delivered in an open and 
transparent way," says Dr. Thomas Way, 
director of Villanova University's Applied 
Computing Technology Laboratory. 

Supercharging The Network 

Google has been vocal in its support of 
the Federal Communications Commission's 
National Broadband Plan, which looks to 
expand mobile broadband and accelerate 
universal broadband access and adoption in 
the United States. That effort will depend 
heavily on eventual innovations and strate- 
gies from telecommunications companies 
and other parties, but Google is wasting lit- 
tle time on moving forward with a broad- 
band plan that has almost everyone in mind. 

According to Minnie Ingersoll, product 
manager at Google, the United States lags 
behind other counties despite its claim to 
fame of actually inventing the Internet. 
However, with Google's plan to deliver 
FTTH (fiber-to-the-home), the company 
will be able to launch bandwidth-intensive 
"killer apps" that today's networks can't 
accommodate. For example, Ingersoll 
notes that just as online video and other 
applications arose from the transition from 
dial-up to broadband, this new ultra-fast 
broadband will spark increased streaming 
of high-definition video content, distance 
learning, remote data storage, real-time 
multimedia collaboration, and other appli- 
cations. This Google-designed network 
will also feature open access, giving users 
a choice between service providers. 



"Contrary to how most of our connectiv- 
ity is provided today, where many con- 
sumers feel that they are at the mercy of a 
few — or only a single — providers, subject 
to the provider' s whim on pricing, this new 
approach could create openness and com- 
petition in this critical marketplace that 
may hopefully drive down cost to con- 
sumers while increasing bandwidth to our 
homes and therefore dramatically increas- 
ing the content possibilities," Way says. 

Proposals Submitted 

Google released a request for information 
in early February, asking interested commu- 
nities to submit proposals for hosting the 
Google Fiber trial. By the end of March, 
more than 1,100 communities around the 
country responded (along with 194,000 
responses from individuals), but most of the 
community respondents will be left out, as 
Google says it plans to reach anywhere from 
50,000 to 500,000 people during the trials— 
a range that will see the trials conducted in 
only a small handful of communities. Yet 
despite the massive, lottery-like fervor, inter- 
ested communities are nonetheless trying 
their best to get their feet in the door. 

"There are very few Internet highways 
coming into Lincoln. However, Lincoln is 
far advanced for a city of its size, with a 
great localized infrastructure. Internet pene- 
tration is high but the amount of backbones 
could be extended by this Google partner- 
ship," says Joseph Knecht, managing direc- 
tor of Vipa Solutions (www.vipasolutions 
.com) and a member of a group in Lincoln, 
Neb., that actively recruited community 
and business leaders to get involved with 
the nomination process. 

Meanwhile, in Flint, Mich., community 
leaders see Google Fiber as an upturn 
opportunity for an area that was particular- 
ly hard-hit by the economic downturn. 
John Foster, a partner at Convergent 
Technology Partners (www.ctpartners.net), 
says Google Fiber could allow Flint's com- 
panies to build data centers locally instead 
of investing money in hosted servers in 
Detroit or even other states. He says the 
project could also allow its colleges to 
build new applications for the future that 
aren't hindered by bandwidth limitations, 
and K-12 educational opportunities could 
evolve to make online and collaborative 
learning a reality with fewer barriers. 

Google says it will choose trial locations 
by conducting site visits, meeting with local 
officials, and consulting with third-party 



organizations. Google expects to announce 
the communities — or even only a single 
community — by the end of the year. 

Google Fiber In Motion 

Little has been revealed by Google in 
terms of how the trials will proceed once the 
company determines the trial communities. 
Villanova' s Way predicts that Google Fiber 
will likely launch in one or two large mar- 
kets, such as New York, Philadelphia, 
Chicago, or San Francisco, along with one 
or two smaller or rural areas. Also unknown 
is how Google will operate the networks, 
though some experts predict the company 
will leave ownership of the network with 
local operators, which in turn will provide 
open access for service providers. 

"Google's intentions are — probably 
intentionally — a bit vague. I suspect that 
they want to push higher use of Internet and 
specifically their applications," says Irit 
Gillath, vice president of product line man- 
agement for Telco Systems (www.telco 
.com). "I would assume that having control 
and knowledge of the user location will 
also increase their ability to provide target- 
ed content and advertisement. They've 
mentioned using these deployments as their 
'playing field' lab for testing new applica- 
tions and new uses for existing services. 
Google has been involved in a lot of differ- 
ent initiatives that have changed the way 
we communicate and the services we're 
using — from open Wi-Fi through their 
involvement in SmartGrid portals." 

Google has been relatively silent on plans 
beyond the trials, though Ingersoll says it 
has no has plans to build a nationwide net- 
work. Way predicts that Google will expand 
its fiber project into a few more markets to 
continue the experiment, as long as the ini- 
tial trials are successful or result in only 
minor problems. He also sees Google Fiber 
as the tipping point for content providers to 
adapt to full network delivery of all content. 

"Eventually, if this is achieved, costs 
could drop overall with a single modality 
of communication being easier to maintain 
from main office, head end, all the way 
into homes and business," Way says. 
"Whether or not Google is successful at 
this, I think it will be an important demon- 
stration of this idea, and with the promi- 
nence that the Google brand brings to this 
issue, it may become a moment of no 
return in the future of networking, com- 
munications, and the delivery of entertain- 
ment, for example, into our homes." 1 



Google 
Fiber For 
Communities 
Applicants 

With applications from more 
than 1,100 communities 
across the United States, the Google Fiber For Communities project is attracting plenty of inter- 
est. The small dots on this map represent government (community) responses, while the large 
dots represent locations where more than 1,000 residents submitted nominations. 
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Symantec Outlines 
The Web's 
Biggest Threats 

A new global Internet security report from 
Symantec shows that the most common Web- 
based attack in 2009 was via PDF. Overall, 
PDF exploits accounted for nearly 50% of the 
total malicious attacks in 2009 — in 2008, mali- 
cious PDF activity was only responsible for 
1 1 % of Web-based attacks. According to 
IVIarc Fossi, executive editor of the Symantec 
Internet Security Threat Report, "Attackers are 




targeting PDFs to compromise the largest 
number of computers possible, and the com- 
mon use and widespread distribution of PDF 
documents on the Web likely helped to 
increase the attacks." The fact that many 
browsers now automatically load a PDF also 
increases the appeal of PDF exploits. 

Other interesting statistics were the large 
increase of malicious activity from developing 
countries, such as Brazil and India. "We've 
seen this type of trend before; as countries 
become more digitally connected, cybercrime 
is never far behind," Fossi says. The United 
States is still where the highest percentage of 
malicious attacks originated, with 19%, but that 
number is lower than the 23% level of 2008. 
Brazil jumped into the top three malicious 
activity countries with a jump from 4 to 6%, 
India moved from 3 to 4%, and Russia in- 
creased from 2 to 3%. Brazil topped the world 
in spam zombie activity. Symantec indicates 
that the threats emerging from the developing 
areas of the world are virtually the same as our 
malware, so you can use the same policies 
and security practices to stop them. 

Fossi notes that "the increased popularity of 
attack toolkits, such as Zeus, is also a con- 
tributing factor as to why there is not as much 
disparity between the threats coming from 
home vs. abroad." The attack toolkits were 
responsible for a wider variety of malicious 
variants. For example, Symantec observed 
nearly 90,000 unique binary files created by 
Zeus, which helped to cause a 71% increase 
in the number of malicious code signatures 
developed by Symantec in 2009. 

Shore Up Your Defenses 

Fossi says that in order for IT staff to prepare 
for new attacks, 'They need to implement 
security solutions that rely on multitiered 
approaches, including not only signature- 
based detection but behavioral, heuristic, and 
file reputation-based protections, as well." 

The last revealing statistic is that social net- 
works are being used more to spread social 
engineering attacks. "The biggest thing IT 
can do to thwart social networking attacks," 
Fossi says, "is to educate users of the com- 
mon tricks attackers use and outline the 
steps they should take based on their organi- 
zation's security policies if they are at all sus- 
picious of something." 

by Nathan Lake 
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Analyzing Performance 

We provide tips for analyzing tine 
performance of your data center's 
servers, cooling, storage, and network. 



Assessing Server 
Performance | 24 

■ For companies looking to 
squeeze greater efficiencies out of 
tfieir data center investments, it 
often makes sense to initiate the 
process on tfie server side because 
of tfie potentially significant payoff. 



Evaluate Your 
Cooling System | 25 

■ Enhancing cooling performance 
is a critical element of data center 
operations. Without heat dissipation 
and cooling, servers can overheat, 
diminishing performance and even- 
tually causing unexpected failures 
and downtime. 



Storage Rundown | 26 

■ Ideally, storage systems would run 
smoothly after installation with little or 
no maintenance involved. But unfortu- 
nately, data center managers know 
that it will be a long time, if ever, 
before storage networks can be 
switched on and then forgotten about. 



Know Your Network 
Performance | 26 

■ Although basic network connectivity 
can be described as durable, making 
sure that the network runs efficiently 
with a minimum of bottlenecks and 
outages is a knottier task. 
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Assessing 

Server 

Performance 

When It Comes To These Vital Data Center Components, 
Small Changes Can Add Up 



by Carmi Levy 

If the data center is the technological 
core of the typical organization, then 
servers represent a central area of focus 
within the data center. For companies 
looking to squeeze greater efficiencies out 
of their data center investments, it often 
makes sense to initiate the process on the 
server side because of the potentially sig- 
nificant payoff. Fortunately, solutions that 
drive improved server performance need 
not be complex or expensive. Answers 
here are often less about buying new 
equipment than looking at existing server- 
related technologies in a different way. 

Analyze Current Server Utilization 

It makes no sense to invest in something 
new until you know how you're using what 
you already have. Jack Gold, president and 
principal analyst of J. Gold Associates, rec- 
ommends investing in some internal analysis 
to better understand whether existing server 
resources are being optimally leveraged. 

"Data center managers should look at 
what kinds of workloads they are running, 
what apps are being used, and how much 
CPU and memory and disk resources are 
being used," says Gold. "They can then 
analyze this data to see where the bottle- 
necks are and where they should put the 
emphasis. Many companies just go ahead 
and buy a new CPU, when often they can 
just look at memory utilization or speed up 
disk access through faster disks or through 
'staging' disks with faster up-front cache." 

Gold adds that this approach mimics 
upgrade strategies long used for PCs, such 
as RAM upgrades, and is usually less 
expensive than buying a new machine. 
More importantly for budget-strapped 
IT decision makers, it typically works just 
as well. 

Consider Virtualization 

If server-side CPU utilization is low. 
Gold recommends looking at virtualizing 
machines and segmenting applications to 



make better use of the hardware capabili- 
ty that's already in place. But it's not a 
free ride. 

"This often can dramatically increase 
performance," says Gold, "but you have to 
make sure there is enough memory and 
disk to make it effective." 

Simply implementing virtualization 
may not be enough, however. Although 



Key Points 



• Work with the business areas to analyze 
how employees and related stakeholders 
use existing applications and use the 
resulting knowledge to identify bottlenecks 
and tweak server configurations accord- 
ingly. Similarly, schedule work on a more 
granular level to avoid demand peaks that 
can tax existing infrastructure. 

• Once servers have been virtualized or con- 
solidated, data center managers should 
tune their application environments to take 
advantage of the new environment by using 
existing server resources more efficiently. 

• The right environmental conditions can 
improve uptime and performance. Revisit 
cooling plans to ensure they've kept up 
with fast-changing and increasingly dense 
server technologies. 



virtuaUzation and consolidation have come 
into their own as key strategies to maximiz- 
ing resource utilization and driving infra- 
structure agility, there are always additional 
opportunities for performance enhancement. 
The job isn't finished once the servers them- 
selves have been virtualized. According to 
Lori Wizdo, vice president of marketing at 
Knoa Software (www.knoa.com), the next 
step is to focus on the applications. 

"One way to achieve more performance 
in a virtualized server is to look at how 
applications are being utilized from the 
end-user perspective," Wizdo says. 
"Monitoring end-user interaction with cer- 
tain applications will identify pain points 



and areas of concern. An organization then 
has the ability to remedy these issues before 
they become too intrusive and costly." 

Assess Workload Patterns 

Just as virtualization levels loads across 
server hardware, a closer look at scheduling 
can similarly level loads throughout the 
workday. Like Knoa Software's Wizdo, 
Gold suggests analyzing end-user applica- 
tion usage to better manage these variances. 
Once specific usage patterns are identified 
and understood, he says IT can then "priori- 
tize the workload to time-critical processes 
running now and less time-critical ones 
running later when loads are lower." 

This more granular resource manage- 
ment strategy can increase utilization rates 
and prevent or delay the need to purchase 
new hardware. Savvy data center managers 
can easily calculate the resulting ROI. 

Tweak Your Cooling Environment 

Changing hardware trends can place 
additional pressure on supporting infra- 
structure such as power and cooling. In the 
rush to implement new generations of 
server technology, some shops may have 
overlooked these critical underpinnings. 
Addressing them now could help IT avoid 
some expensive lessons later. 

"If you've started to deploy blades, you 
may run into trouble cooling the hot spots 
that result," says Nik Simpson, a senior ana- 
lyst with Burton Group. "The overall data 
center temperature is likely OK, but there 
may be some racks that glow in the dark." 

This is typical of data centers with cool- 
ing systems that may have been designed 
years ago, when server densities were 
much lower than they are today. Because 
this outdated cooling infrastructure isn't 
capable of delivering enough cold air to 
keep the hot spots in check, a more granu- 
lar analysis of the environment — often 
involving computational fluid dynamics — 
could cost-effectively reduce risk and 
improve server performance and uptime. 
For more information on analyzing your 



data center's cooling, turn to "Evaluate 
Your Cooling System" on page 25. 

Become An ROI Expert 

Efficient as they are, server performance 
improvement initiatives aren't necessarily 
free. You may need to reallocate IT re- 
sources to more stringent monitoring activi- 
ties and purchase software and tools. In 
budget- starved environments focused on 
keeping the lights on, performance improve- 
ment may not always be a priority. 

Justify investments in incremental server 
performance improvement initiatives by cal- 
culating costs for hardware acquisitions 
over time. Beyond initial purchase price, 
factor in fully burdened energy, cooling, 
support, and management costs throughout 
the equipment life cycle. Use the cost avoid- 
ance argument to justify investments in less 
invasive initiatives. Not surprisingly, the 
ROI in these cases is typically high. 

Top Tip: Tighten 
IVIanagement 
& IVIonitoring 
Tools & Practices 

You can't manage what you can't see, and 
as data centers become more complex and 
more interlinked with underlying business 
applications and processes, active monitoring 
becomes an increasingly crucial means of 
maximizing availability. Therefore, if invest- 
ments in monitoring tools — and the process- 
es that guide their use — have lagged because 
of budget restraint, Moosa Matariyeh, enter- 
prise storage specialist at CDW (www.cdw 
.com), recommends reprioritizing them. Rel- 
atively small investments here can pay off 
significantly in more efficient usage of existing 
server-based resources, Matariyeh says. It 
can also pay off on the business side, with 
greater application and data availability, as 
well as improved regulatory compliance. 
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Evaluate Your 
Cooling System 

Use Benchmarks & Airflow Assessments 
To Determine Cooling Performance 



by Sixto Ortiz Jr. 

Enhancing cooling performance is a 
critical element of data center operations. 
Without heat dissipation and cooling, 
servers can overheat, diminishing perfor- 
mance and eventually causing unexpected 
failures and downtime. And the worst 
thing for a data center administrator is 
encountering issues that can impact busi- 
ness operations and the bottom line. 

Data center administrators must always 
look for ways to increase efficiencies, reduce 
costs, and deliver results. Cooling system 
performance is an integral part of this strate- 
gy, and it all begins with a deliberate, logical 
strategy for analyzing system performance. 

Measure, Measure, Measure 

The first step to take when looking to 
improve data center cooling performance 
is to measure how it currently performs, 
right down to the cabinet level, says John 
Consoli, chief technology officer at AFCO 
Systems (www.afcosystems.com). Consoli 
recommends that administrators measure 
benchmarks against industry-standard 
measurements such as PUE (power usage 
effectiveness) and DCiE (data center infra- 
structure efficiency). 

These two benchmarks allow administra- 
tors to calculate efficiency scores for data 



centers, letting them assess the effective- 
ness of the measures they implemented. 

Understand Airflow Considerations 

Cooling equipment is an exercise in heat 
transfer: Heat from operating equipment is 
transferred to cold air sweeping through 
the equipment aisle. Maintaining the 
effectiveness of that heat transfer opera- 
tion is thus essential to ensuring data cen- 
ter cooling effectiveness. 

Dan Hyman, founder of Custom Mechan- 
ical Systems (www.cmscooling.com), rec- 
ommends that administrators measure the 



Top Tip: Understand 
Your Plan Of Attack 

John Consoli, chief technology officer at 
AFCO Systems (www.afcosystems.com), 
says administrators should understand their 
overall cooling strategy, whether it is a hot 
aisle/cold aisle layout, aisle containment, 
in-row cooling, or active airflow manage- 
ment. Each of these approaches, says 
Consoli, has positives and negatives, so 
administrators should become familiar with 
the pros and cons of their chosen course 
of action and plan accordingly. 



temperature of the air entering the racks. 
Personnel should look for hot spots or 
problem areas as well as variations in tem- 
perature, Hyman says. If there are isolated 
hot spots, there are many ways to address 
these that will let you increase the tempera- 
tures in the rest of the data center. 

AFCO Systems' Consoli points out that 
most cooling problems are really just the 
results of poor airflow management. 
Administrators should remember that 
every watt of power put into the data cen- 
ter is converted into a watt of heat that 
must be cooled, he adds. 

Computational fluid dynamics, or CFD, 
is a tool that can be used to accurately 
model the effect that cooling resources are 
having on data center temperatures, adds 
Consoli. CFD can show administrators 
where cooling inefficiencies exist and also 
model the improvements in airflow neces- 
sary to enhance data center cooling. 

In a nutshell, CFD is a subset of the 
overall science of fluid mechanics, which 
uses complex mathematical computations 
to model the flow of liquid or gaseous flu- 
ids. Thus, CFD is an ideal tool to model 
the airflow going through a data center. 

Quantify Data Center 
Energy & Airflow Status 

In order to assess effectiveness, it is 
necessary to determine baseline conditions 
in the data center, because without a base- 
line, it's difficult to assess whether mea- 
sures undertaken are effective or merely a 
waste of time and resources. A way to do 
this is to quantify the air and energy flow 
status in the data center. 

Carl Cottuli, vice president of product 
development and services at Wright Line 
(www.wrightline.com), proposes a simple 
methodology administrators can apply to 
determine the energy and airflow status in 
their data centers. For starters, Cottuli rec- 
ommends that administrators measure four 
critical temperatures: A/C Outlet (Temp 



1), IT Inlet (Temp 2), A/C Inlet (Temp 3), 
and IT Outlet (Temp 4). 

Subtracting Temp 1 from Temp 2 yields 
the average temperature rise in the supply 
chain of cool air entering the data center. 
This is an indication of the amount of heat 
mixing with cold air before its arrival at 
the IT equipment, Cottuli says, adding that 
this figure signifies waste that must be 
controlled, which will result in improved 
cooling performance. 

The next step is to subtract Temp 4 from 
Temp 3; this number, called the return 
path temperature, indicates the amount of 
cool air that bypasses IT equipment and 
returns to the AC unit without doing any 
cooling, says Cottuli, adding that this 
number is an indication of data center 
"chaos cooling," which is an indicator of 
cooling performance unpredictability. 

These readings, says Cottuli, should be 
evaluated as pairs of delta temperatures in 
the supply and return path. For example, 
he adds, more cooling capacity than 
demand yields a low temperature differ- 
ence in the supply path but a high temper- 
ature difference in the return path. 

Pay Attention To 
Infrastructure Considerations 

The infrastructure in the data center, from 
aisle orientation to cabinet configuration. 



Key Points 



Measuring against industry-standard 
benchmarks such as PUE and DCiE can 
help administrators establish meaningful 
baselines for assessing performance. 
Computational fluid dynamics, or CFD, 
is a sophisticated and useful tool for 
developing a realistic model of airflow in 
the data center. With CFD, administrators 
can gain insight into airflow problems and 
effectively address them. 
Even seemingly pedestrian items, such 
as equipment arrangement and aisle 
configuration, can make a significant 
impact on a data center's cooling system. 
Ensuring these variables are optimal is 
a straightforward way to assess cooling 
system performance in the data center. 



can have a tremendous impact on cooling 
system efficiencies. Administrators should 
not ignore these factors when assessing data 
center cooling performance. 

Jean-Paul Daemen, CEO of Uptime 
Devices (www.uptimedevices.com), says 
administrators should install reliable envi- 
ronmental monitoring products so they 
can ensure that the existing equipment 
arrangement maximizes the expulsion of 
heat away from the air intakes of other 
equipment. According to Daemen, this is 
necessary because not all equipment has a 
front-to-back air cooling configuration. By 
monitoring the return air temperature, per- 
sonnel can determine whether the equip- 
ment arrangement is optimal. The higher 
the return air temperature, the greater the 
airflow management savings, he adds. 

Administrators should also pay attention 
to physical obstructions that can interfere 
with airflow in the under-floor plenum, 
says Bill Mazzetti, P.E., chief engineer and 
vice president of engineering at Rosendin 
Electric (www.rosendin.com). Although 
conduit in the slab won't typically affect 
airflow, network cabling and fire protec- 
tion system piping and conduit may form 
unwanted air dams. Admins should ensure 
that objects or systems are placed no high- 
er than one-fourth to one-third of the 
under-floor clearance to minimize the for- 
mation of air dams, he adds. 
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Storage Rundown 

Knowing How Well Your Storage Systems Are Performing 
Can Aid In Efficiency & Capacity Planning 
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by Bruce Gain 

Ideally, storage systems would run 
smoothly after installation with little or no 
maintenance involved. But unfortunately, 
data center managers know that it will be a 
long time, if ever, before storage networks 
can be switched on and then forgotten 
about. Troubleshooting, monitoring, replac- 
ing faulty disks, and other similar activities 
still represent a large part of what admins 
spend their time doing for storage applica- 
tions. However, among the more important 
tasks is performance analysis. 

Analyzing storage performance is neces- 
sary to make sure that storage remains 
operational and is running as efficiently as 
it should. Although assessing performance 
is a key part of troubleshooting when users 
complain about slow storage speeds and 
disk or server crashes, the main purpose of 
storage analysis is to be able to take action 
and make changes before potential prob- 
lems turn into fires that have to be put out. 
Here are some tips on how best to analyze 
storage performance. 

Assess The Different Layers 

From the disks in the storage arrays to stor- 
age interface controllers to the cabling under- 
neath the floor connecting workstations and 



servers, performance analysis involves 
many components, any one of which can 
bring data transfer rates to a halt in the 
event of a problem. Analyzing perfor- 
mance thus involves ensuring that you 
have a full understanding of all the storage 
assets, both virtual and physical, says Todd 
Mitchell, general manager of dedicated 
hosting and global services at The Planet 
(www.theplanet.com). "Understanding 
what is currently deployed by your organi- 
zation can mean the difference between 
spending precious CAPEX [and] repurpos- 
ing existing technology," Mitchell says. 

It is also necessary to make spot 
checks of different areas of the storage 
network on a regular basis. "You need to 
break down the [storage network] into 
individual pieces and verify that the 
pieces are performing as expected," says 
Gene Ruth, an analyst for Burton Group. 

On a storage server level, for example, 
disk arrays have management applications 
that can perform analytics. "So as part of 
your exploration, you obviously want to 
bring up these analytics and measure what 
the activity is on any particular disk array 
and compare those numbers against what 
the manufacturer says are upper-perfor- 
mance numbers," Ruth says. "It may be 
simply that you are trying to get more out 
of a disk array than is possible." 

The Benchmarks 

To get into the nitty-gritty of the actual 
performance of storage layers, it is neces- 
sary to use benchmarking software that 
details specific performance metrics. Many 
benchmark software options exist that 
gauge the different layers of storage perfor- 
mance, available from commercial as well 
as nonprofit vendors. However, besides 



Know Your Network Performance 

Put A Finger On The Pulse Of Your Data Center's Flow Of Information 



by Robyn Weisman 

If you go back to about 1994 or 1995, 
when Netscape 1.0 became available and the 
Web started taking off, the network perfor- 
mance needs of the average data center were 
fairly modest and targeted. Today, keeping 
networks up and running is not a major con- 
cern because connection technologies such 
as Ethernet are so stable, says Ted Ho, CEO 
of Gigamon. In addition, the Internet itself is 
largely resistant to failure, says Jim Melvin, 
CEO of Apparent Networks. "IP networking 
is so dynamic that regardless of what hap- 
pens, it maintains connectivity — one of its 
greatest features," Melvin says. 

Although basic network connectivity can 
be described as durable, making sure that the 



network runs efficiently with a minimum of 
bottlenecks and outages is a knottier task. 
Motti Tal, executive vice president of mar- 
keting and business development at OpTier 
(www.optier.com), says that it's pretty much 
a given that IT environments have become 
increasingly complex over the years. "A data 
center today is composed of so many differ- 
ent moving parts, technologies, and technolo- 
gy expertise areas that [it's important] to 
assure that transactions flow smoothly within 
applications and the infrastructure [in order] 
to improve compatibility and the end-user 
experience while reducing costs," says Tal. 

According to Ho at Gigamon (www 
.gigamon.com), network monitoring and 
performance analysis in the data center are 
too often an afterthought. Most network 



tools purchased over the past decade do 
not have the capacity to monitor 2010-era 
networks, many of which employ virtual- 
ization, cloud computing, distributed com- 
puting, and high-speed connectivity. Given 
that networks have become so much more 
complex, how do you analyze network per- 
formance effectively? Here are some tips 
to keep in mind. 

Get Visibility Into Your Network 

Let's say you are trying to deliver virtual- 
ized application services to six remote 
offices around the country because you are 
trying to cut down on administrative over- 
head and conserve computing resources. 
However, your users are complaining that a 
virtualized application isn't working. Is it 
because the application itself isn't working 
or because the WAN connection is acting 
up? Without visibility into your network, 
you won't know one way or another. 

Visibility into network performance may 
be at an all-time low because the use of third- 
party networks is at an all-time high, says 
Apparent Networks' Melvin (www. apparent 
networks.com). "Things generally work, but 
from a performance perspective, they don't 
always work the way we need them to. 
Every time the IP network reconfigures to 
maintain connectivity, performance changes, 
and applications like desktop virtualiza- 
tion, VoIP, and remote storage are perfor- 
mance-sensitive," Melvin says. "You need to 



Key Points 



• Gaining visibility into your networl< is job 
one wlien it comes to monitoring and 
analyzing performance. 

• Continually monitor network perfor- 
mance because a snapshot can't cap- 
ture today's dynamic networks. 

• View your network as a whole, rather 
than as a collection of different devices, 
and then approach monitoring from a 
top-down perspective. 



know what [your network] is experiencing 
with relation to latency, jitter, and round- 
trip time." 

Continually Monitor Performance 

Melvin likens today's networks to liv- 
ing, breathing animals that need to be 
measured on a continual basis in order to 
maintain quality of service regardless of 
whether a user is in the data center itself 
or a customer or remote worker is 
accessing the network. 

OpTier' s Tal says not to rely on snap- 
shots of your network but to continuous- 
ly measure its functionality over time. 
"Create a repository of historical perfor- 
mance [that includes] benchmarks and 
measurements of the end-user experi- 
ence," Tal says. "I can wager that any 



Top Tip: Minimize Latency 



Your network can never be too 
fast. In fact, the speed of your 
network often determines 
whether a customer buys from 
you or gets frustrated and clicks 
away from your site. Customers 
don't care how many servers or 
presentation layers it takes for 
them to access whatever prod- 
uct or service they are seeking, 
says Motti Tal, executive vice 



president of marketing and 
business development at 
OpTier (www.optier.com). 

'The end-user experience is 
the place you want to start out 
at. If you only focus on individ- 
ual components, they might 
receive their response too late, 
or it may be erroneous, or they 
might get an hourglass without 



a result. Meanwhile, your net- 
work, including your servers 
and storage, will know nothing 
about it," says Tal. 

"For example, investment 
banks are trying to drive down 
latency to the speed of light. 
There is no limit for business- 
es to get better service from 
their networks," Tal adds. 



May 21, 2010 



Processor.com 



Page 27 



News 



word of mouth and reading about products 
in trade journals such as Processor, decid- 
ing which benchmark software to use 
should be largely based on how well it is 
geared toward the specific application to be 
tested, according to Levi B. Norman III, 
director of marketing and OEM for Texas 
Memory Systems (www.texmemsys.com). 

Specifically, storage performance 
benchmarks test I/Ops (inputs/outputs per 
second) and data throughput measured 
in megabytes or gigabytes per second. 
"I/Ops [metrics] tell how fast you can 



Key Points 



• Analyzing performance involves 
checking and testing all of the different 
layers and components of the storage 
infrastructure. 

• For software tests, benchmarking soft- 
ware must be geared toward the specif- 
ic applications and components. 

• Proper analysis of storage performance 
can aid enterprises in capacity planning 
and establishing benchmarks to follow 
in the future. 



access data, while throughput tells how 
much data can be accessed for a given 
time frame," Norman says, adding that 
most other metrics can be derived from 
these measurements. 

The specific storage process thus deter- 
mines whether storage metrics are mea- 
sured in I/Ops, throughput, or both. 
Testing an online analytical processing 
system, for example, involves testing for 
I/Ops-based statistics because the more 
I/Ops a system can perform, the faster it 



will generally process small discrete transac- 
tions, Levi says. For data warehouse systems 
and decision support systems, throughput is 
measured because the transactions deal with 
accessing large amounts of data quickly, 
Levi says. 

Find A Single Interface 

Running benchmarks and tests to analyze 
storage performance requires a varied set of 
human skills to be able to sift through and 
analyze data from many different sources. 
However, software tools that help with the 
different analyses can definitely make the 
process easier and more efficient. 

It is highly recommended, for example, to 
find software that groups all of the data 
points into a single interface. "Adopt a struc- 
tured approach to performance management 
by deploying a solution that delivers a 'single 
pane of glass' for path-aware analysis," says 
Kyle Fitze, director of marketing for the stor- 
age platforms division at HP StorageWorks. 
"Analyzing performance at different points 
in the data path via a single, consolidated 
view helps to quickly identify bottlenecks 
and isolate elements that are causing prob- 
lems. This approach allows you to under- 
stand the root of the problem and leverage 
trends to make informed decisions." 

Prepare For The Future 

Breaking down and analyzing the differ- 
ent performance results of your tests will not 
only help you determine whether your stor- 
age system is performing like it should now, 
but it will also serve to make forecasts about 
what kind of upgrades and changes must be 
made to handle demands in the future. The 
process also involves looking at historical as 
well as present performance data to better 
gauge what to expect in the future. Analyze 



Top Tip: Listen 
To Your Users 

World-class benchmarking and analysis capa- 
bilities are of no use if storage performance is 
not up to par with what users — who are really 
the IT department's customers — need and 
expect. Oftentimes, data center managers 
may be unaware of bottlenecks that just a few 
users experience, which go undetected during 
macro-level performance tests. Qualitative 
feedback from users can thus offer a lot of 
information you may not get othen/vise about 
how well your storage system is performing. 
Ultimately, user feedback will also enable you 
to assess whether storage applications are 
meeting the enterprise's business needs. 

'Take the time to review what your storage is 
currently being tasked to do. Call your [users], 
whether they're internal or external, and better 
understand what they're trying to accomplish," 
says Todd Mitchell, general manager of dedi- 
cated hosting and global services at The 
Planet (www.theplanet.com). "You may find 
that you're running low on Fibre Channel disk 
space and the [user] who's consuming the 
majority of that capacity is storing old and 
unused marketing videos, for example." 

performance properly, and it will be possible 
to help prevent bottlenecks and disk array 
overloads from occurring. 

"The results provided by performance 
analysis software can help organizations 
identify potential roadblocks and to avoid 
them as well as establish a benchmark for 
future analysis," Fitze says. "[Performance 
tests] can also help organizations make 
informed decisions on capacity planning." 



environment, no matter how well it is 
managed, will have issues." 

Issues can arise out of many avenues. 
Applications are constantly changing 
because your business needs those 
changes to take place, and the network 
infrastructure itself gets altered whether 
you decide to virtualize applications or 
update your database. "Anything you're 
doing that creates change in your envi- 
ronment is likely to break stuff because 
the complexity is so great," says Tal. 
"Even if something doesn't actually 
break, but a bottleneck occurs between 
two points in the flow, things might 
get held up and transactions might not 
go through." 

Take A Top-Down Approach 

According to Melvin, the legacy ap- 
proach to monitoring networks revolved 
around device management. But given that 
a network today can consist of thousands 
of devices within the main data center and 
hundreds more in each remote office, try- 
ing to get a handle on every moving part is 
overwhelming at best. Therefore, Melvin 
recommends taking a top-down approach 
to your network instead. 

"Think about overall service quality 
being delivered [rather than] managing 
every device between the data center and 
all the end users," Melvin says. "Are you 
meeting the SLA that you're supposed to 
be meeting for the delivery of the ser- 
vice? If you are, your users are happy. It 
doesn't complete your job, but you're 
doing OK." 

Think Outside The Network 

Traditionally, IT has focused on the 
main data center that is located within 



corporate headquarters, but nowadays, most 
consumption of network services within an 
organization happens outside the central 
office. "There are 1.6 million remote and 
branch office locations in the U.S. alone, 
and most of the work is being done in these 
offices, and the problem with that is that 
the IT staff is still back at headquarters 
making the data center work from that end," 
Melvin says. 



Melvin recommends that your view into 
your organization's network must include 
the perspective of the actions taking place 
in these outlying locations, especially 
when you don't have the budget to keep 
dedicated IT staff (or even a single IT pro- 
fessional) at these offices. A combination 
of visibility and appropriate technology 
will enable you to monitor these portions 
I of the network in a cost-effective way. im 




I Arizona's Immigration Laws 
Could Hurt Its Tech Industry 

The recent immigration law passed in Arizona 
requires noncitizens to carry papers with 
them at all times, as police officers can 
question their immigration status if they 
have reasonable suspicion to do so. The law 
affects workers with H-1B visas, because 
they'll have to carry important documents 
such as their passport and H-1B paperwork 
with them all the time. Some fear that the 
backlash from businesses and tourism over 
the controversial law will have a negative 
impact on Arizona, possibly discouraging 
businesses from locating there. Already, city 
officials in both Los Angeles and San 
Francisco have suggested boycotting the 
state and its businesses. 




I Patent Suit Against 
Apple Is Investigated 

In response to a complaint by Elan Micro- 
electronics, the U.S. International Trade 
Commission will investigate Apple for patent 
infringement. The suit alleges that Apple vio- 
lated Elan Microelectronics' patent on multi- 
touch technology in a number of its products, 
including the iPod touch, iPhone, iPad, Mac- 
Book, and Magic Mouse. Elan Microelectron- 
ics wants the ITC to stop U.S. imports of 
those products and prevent Apple from sell- 
ing any of the devices. A target date for the 
completion of the ITC investigation and its 
associated decision in the matter has not yet 
been set. 

I l\/lobile Phone Shipments Increase 

According to IDC's Worldwide Mobile Phone 
Tracker, global shipments of mobile phones 
have jumped more than 21% in the first 
quarter of the year, with 294.9 million units 
shipped. Nokia still has the largest global 
market share, but BlackBerry maker Re- 
search In Motion has replaced Motorola in 
the global market share top five. However, 
IDC expects shipments to slow and end the 
year with 11% growth. Additionally, smart- 
phone shipments have increased by 50% 
through the first quarter, says Strategy 
Analytics. According to the market researcher, 
Nokia also leads the global smartphone 
market share with 40%, followed by RIM 
(19.7%) and Apple (16.4%). 

I Google Continues Lead 
In Search Engine Use 

According to the online traffic monitoring ser- 
vice Hitwise, Google grabbed 71 .4% of all 
U.S. searches in April, which is a 2% increase 
compared to the previous month. Yahool's 
search engine share slipped by a single 

Go ogle 

percent, to 14.96% in April, while Microsoft's 
Bing lost 2% of the search share to finish the 
month with a 9.43% share. Although Bing's 
market share has dropped recently, the Hit- 
wise numbers show that, after just 10 months, 
Microsoft's search engine has gained a bit of 
a following. 
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Survey Shows Concern 
Over The Security 
Of Cloud Computing 

About 45% of IT pros think the security risl<s 
of cloud computing outweigh the potential 
benefits of instituting it, according to a Risk/ 
Reward Barometer produced by the Informa- 
tion Systems Audit and Control Association. 
Overall, sun/ey respondents were, in general, 
either accepting of risks where those risks 
would be carefully assessed (69%) or "risk 
aggressive" where they would take large risks 
(11%), showing 80% of businesses overall as 
risk-receptive. 

Robert Stroud, international vice president of 
ISACA, says enterprises are generally willing 
to undertake some risk, but they do see an 
increased risk when it comes to cloud comput- 
ing. "As cloud computing is relatively new and 
still not fully understood, there are many per- 
ceived risks, including security, privacy, and 
continuity. It is logical that the risk appetite 
relating to cloud [computing] will be higher." 

The ISACA sun/ey also looked at enterprises' 
plans for using cloud computing. Only a quarter 
plan to use it either for low-risk, non-mission- 
critical IT services (15%) or mission-critical IT 
sen/ices (10%). Stroud sees this as "typical 
of the adoption cycle for any new technology, 
where adoption takes place over time." He 
sees the cloud being used initially for noncriti- 
cal use to help enterprises gain knowledge, 
skills, and experience. 

Risky Behaviors 

When it comes to risky employee behaviors, 
respondents to the ISACA survey say employ- 
ees who don't protect confidential work data, 
don't comprehend IT policies, and use non- 
approved software or online sen/ices for their 
work are the top three, cited by 50%, 33%, 
and 32% of respondents, respectively. Overall, 
enterprises are taking a consen/ative approach 
this year. Citing the economy, 61% of the re- 
spondents feel their enterprises should under- 
take the same level of risk as in 2009, with only 
22% saying they can undertake more risk than 
last year. 

Stroud says there are tradeoffs involved in 
adopting cloud computing, including the per- 
ceived risks of security and privacy of the 
enterprise's information and the credibility, his- 
tory, and reputation of the cloud provider. 'To 
alleviate some of these concerns," he says, "it 
is important to pay careful attention to the cloud 
provider's sen/ices and sustainability." Also 
important is the cloud provider's compliance 
with regulations and laws, especially where 
data may reside in a different geography from 
the consumer. It's all about "balancing risk vs. 
return to drive profitable growth," Stroud states. 

by Patrick Kean 



How End-User Behavior 
Impacts Security 

What Employees Don't Know Can Hurt The Enterprise 



by Bridget Mintz Testa 
• ■ ■ 

Most employees don't intentionally set 
out to endanger their employers' networks, 
operations, finances, customer relationships, 
legal standing, or reputation. Unwittingly, 
though, some workers still can wreak the 
same damage as the notorious disgruntled 
employee. It's up to IT managers to ensure 
that well-meaning employees don't acciden- 
tally compromise the enterprise through 
seemingly harmless actions. 

Risl(y Behavior 

Employees who obtain unauthorized 
software or data from equally unautho- 
rized sources represent a continuing prob- 
lem for enterprises. "People browse the 
Internet, where they can hit Web sites that 
can inject all kinds of variables — viruses, 
Trojans — onto a business network that can 
take the whole network down," says Bob 
Anderson, director of product develop- 
ment and quality assurance for Computer 
Aid (www.compaid.com). "Or they down- 
load material . . . from inappropriate Web 
sites — that can create legal issues." 

He explains that legal issues can arise if 
an employee happens to download material 
onto the network from an inappropriate 
Web site, or the employee may introduce a 
virus to the system if he loads unprotected 
software from outside the enterprise onto 
his work computer. Portable storage de- 
vices, such as flash drives, carry the same 
hazard, as well. 

The enterprise can be another source of 
unauthorized software and data. For 
instance, maybe you have an employee 
who wants a business function or capabili- 
ty that is not available within the enter- 
prise. He may develop a program himself 
or have a third party develop it for him — 
so he can do his job. "He keeps these 
bootleg applications in his personal library 



Key Points 



• Employees can unwittingly introduce mal- 
ware throughout the enterprise by loading 
unauthorized software from portable stor- 
age media or by downloading it from the 
Internet. Although it may not be malware, 
unauthorized software developed within the 
enterprise can create customer relation- 
ship, legal, regulatory, and other problems. 

• When employees use alternate means 
of handling company information that 
bypass protections, such as instant mes- 
saging or auto-forwarded email, they 
unknowingly jeopardize the network and 
the enterprise. 

• Keeping application and security software 
current and universal, using application 
auditing and Web filtering software, and 
establishing a regularly updated and highly 
visible software/IT assets usage policy are 
the best ways to address employees' unin- 
tentional but risky misbehavior. 



employee is out for a week? The IMs come 
in and no one is there to receive them? The 
customer can be very unsatisfied." 

That's the least of the IM potential for 
problems. If employees take credit card 
data or obtain medical information over 
IMs in their dealings with clients, PCI and 
HIPAA compliance are now at risk. 

Cardinal says IMs can be "a source of 
intrusion for malicious activities. IMs can 
bring attachments in that contain virus[es], 
and the virus [es] can completely bypass all 
the protections you have in place for 
email." That's because IMs come through 
Internet port 80 and/or 442 and not through 
the email server. Cardinal explains. 

Employees who work remotely from 
home can potentially create problems, 
as well. Maybe the employee is denied 



Legal issues can arise if an employee 
happens to download material onto the 
network from an inappropriate Web site. 



on his PC," Anderson says. "Now he starts 
to capture company information that 
nobody else has." 

With that data, the employee may, for 
example, produce reports that no one else 
can create. The reports could be valuable 
to the company and become part of the 
business process. 

Anderson explains that this becomes a 
risk because "when that employee's gone, 
the data stops. If [the information] is 
important and needed, it should be formal- 
ized and documented. Make it part of the 
inventory of company IT assets." 

Interacting with clients through IM can 
also cause problems. "It seems easier to 
deal with the customer [through IM]," says 
Adam Cardinal, principal consultant for 
information security and risk management 
for lANS. "But what happens if the 



remote access, he has to take a laptop home 
every night, or he has a VPN that doesn't 
work well. Cardinal says, "He can't keep 
up with email, so he uses auto-forwarding 
through Hotmail or Yahoo! email or some 
sort of mobile application like Mobile- 
Me. These are all open accounts with no 
filtering. If the enterprise isn't aware of 
the auto-forwarding, it may think a lot of 
information is inside the organization when 
it isn't." 

Like IM data, auto-forwarded email that 
bypasses the company's email server can 
"have competitive advantages or regula- 
tory limitations," Cardinal says. "This data 
is all leaving your enterprise, and it's out 
of your control." If such information 
should escape, it also creates tremendous 
customer, legal, regulatory, financial, and 
reputational risks. 



Prevent Unintentional 
Bad Employee Behavior 

The risks are many. So, what are 
the solutions? 

If an enterprise's IT department does 
not monitor or protect every in-house 
computer, it's important to impress on 
employees the need to keep their applica- 
tions updated and patched. "Malware is 
done on a scattershot basis and is updated 
minute-by-minute," says Lysa Myers, 
director of research for West Coast Labs, 
an independent test lab that monitors and 
evaluates antispam/anti-malware products. 
"So malware might not be caught at the 
network gateway, but if an employee 
keeps all his applications updated, that can 
stop it," Myers says. 

She adds that there are many security 
products for operating systems, browsers, 
and applications; and developers are mak- 
ing management software to enforce the 
application updates. 

To prevent employees from loading 
unauthorized applications onto their ma- 
chines. Cardinal recommends withholding 
administrative access from them. "If em- 
ployees need administrative access, then 
the company must perform due diligence," 
he says. 

To do that. Cardinal says enterprises 
need to employ software-monitoring 
applications. To prevent access to suspect 
Web sites, use Web-filtering applications. 

The best protection a company can have, 
however, is a current and widely under- 
stood software/IT usage policy. "There 
should be agreements employees sign that 
define responsibility; the handling and 
use of company information, computers, 
access to the Internet, no installation of 
outside software; and it should be part of 
the new-employee onboarding process," 
Anderson says. Such policies should cover 
known and potentially risky behaviors as 
well as penalties and enforcement actions 
the company can take. "Keep it short and 
sweet," Anderson says. "Give people what 
they need, but don't bury them." 

Even if you've done everything you can, 
"There is no bullet-proof solution," Myers 
says. "Make sure you have as much pro- 
tection as possible." 

Use Access Logs 
To Catch Disgruntled 
Employees 

Disgruntled employees with access to sensi- 
tive data can potentially create problems for 
enterprises. To stop them, enterprises "must 
have appropriate levels of security and mon- 
itoring of people with access to sensitive 
information," says Bob Anderson, director 
of product development and quality assur- 
ance at Computer Aid (www.compaid.com). 
"IVIanagers should look at what's accessed 
from logs for sensitive data to make sure 
people aren't damaging, destroying, giving 
away, or selling company data." 
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Physical Access 
To The Data Center 

Restricting Who Can Enter The Facility Is Key 



by William Van Winkle 

For many data centers, few things matter 
more than uptime and data security, and both 
are highly prone to being botched through 
human interaction, whether malicious or 
accidental. Either way, it's clear that data 
centers need to exercise less hospitality with 
the outside world to protect their assets. 

"Memory, blade servers, large SSDs, and 
other components are both very high value 
and portable enough to conceal under 
clothing or in a pocket," notes Rob Enderle, 
principal at Enderle Group. "A disgruntled 
employee or someone [who] thinks they are 
playing a prank can do untold damage to 
the hardware and operation of the compa- 
ny, particularly if the firm has consolidated 
[its] servers into a few racks. Even messing 
with the thermostat in the room can cause 
performance degradation and potentially 
result in expensive, permanent damage." 



Enderle says data centers should be treat- 
ed "like a vault." No one should be allowed 
around systems without proper authorization 
from management. Moreover, there should 
be a permanent record of anyone entering 
restricted spaces, and that record should be 
set up in such a way that one person couldn't 
possibly alter or delete the record. 

"The only people who should have unre- 
stricted data center access are those who are 
critical and have been trained in all aspects of 
the data center, both IT and facility," says 
Pete Sacco, founder and president of PTS 
Data Center Solutions (www.ptsdcs.com). 
"Everybody else should be there with an 
escort and watched. All the time, I see people 
who have their electrical or air conditioning 
systems serviced and just leave the contractor 
alone to do his thing. Nobody checks on him. 
Nobody even makes sure the maintenance 
was done. Noncritical access should be like 
scuba diving. It's a two-man effort." 



Video surveillance tends to top 
most experts' lists of required 
physical security elements. 



Clearly, controlling physical access to the 
data center is key, but how should managers 
best go about it? 

The Human Factor 

Any subsequent steps taken to control 
physical access won't amount to much with- 
out explicit and enforced policies in place. 
This begins with teaching employees that 
the default answer to any request for access 
is no. The only time a yes answer is given is 
when there's a defined business need for an 
employee to have access. 

Solid Physical 
Guidelines 

Although there are no industry standards in 
physical security, the SANS Institute released 
its Data Center Physical Security Checklist 
(www.sans.org/reading_room/whitepapers 
/awareness/data-center-physical-security- 
checklist_41 6) several years ago, and it 
remains, for the most part, as valid today as 
when published in late 2001. Key design 
recommendations include: 

1 . Having parking spaces located more than 
25 feet from any building wall to minimize 
the risk of car bomb damage. 

2. Data center computer rooms should never 
have windows to the building exterior. 

3. Every building entrance except the loading 
dock should have a mantrap. 

4. Leases for data centers should state that 
competing companies cannot have equip- 
ment located in the same computer room. 

5. All computer room visitors must sign 
nondisclosure agreements. 



Candice Low, research analyst for Info- 
Tech Research Group, adds that only em- 
ployees with a need for daily, hands-on 
system access should be allowed blanket 
entry permission. Even then, it might be 
advisable to look into remote management 
methods for accomplishing tasks that have 
hitherto needed hands-on presence. 

The bigger problem, according to Low, is 
third-party administrators and maintenance 
personnel. "The headache is monitoring and 
controlling people like that who don't work 
for the company, because they fall outside of 
your policies," she says. "If one of your ven- 
dors needs access to your facilities, you need 
to know about it ahead of time. Someone 
can't just show up and be granted access. 
You have to verify who the people are and 
track back the appropriate documentation. 
Everything they're doing has to be laid out 
ahead of time. Don't just let somebody start 
wandering around your systems and do 
whatever they want." 

Enforcing this sort of restriction will elimi- 
nate the risks of social engineering attacks 
and accident-prone visitors. Also, be sure 
that policies include repercussions for when 
they're not followed, and educate employees 
on why specific access and security policies 
exist in the first place. 

Design 

From biometric locks to redundant power 
systems, there's a sizable industry focused on 
devices that data center managers can use for 
enhancing physical security. But costly steps 
are typically overkill for a data center, in 
Sacco' s opinion. In fact, his experience indi- 
cates that complex design steps in physical 
security tend to be much less effective than 
simple ones. For example, he says that 
mantraps, airlock-like chambers that require 
someone to pass through two doors before 



Key Points 



• Restrict access into data centers to the 
barest minimum possible. 

• Some experts believe that the simplest 
physical security measures, such as video 
surveillance, tend to be more effective than 
complex building design elements. 

• Ascertaining value and ROI can be difficult 
with physical security measures, so gauge 
investment according to potential loss. 



entering a room, "may look good aestheti- 
cally, but don't offer much security validity. 
If you're putting in a mantrap, you better 
have 24/7 security staff. And I find that most 
data center operators don't do that." 

Video surveillance tends to top most 
experts' lists of required physical security 
elements. In particular, you'll want to posi- 
tion cameras within the computer room and 
at every entrance to the data center. These 
days, the analog CCTV systems often advo- 
cated in security guidelines have given way 



to IP-based systems that staff can monitor 
from across the Internet, reducing the need 
for as much onsite security personnel. And 
while you can use video forensically after 
a security incident, it's even more useful as 
a deterrent. 

Electronic lock systems are expected in 
data centers, but you shouldn't depend on a 
single authentication method. People who 
need to gain admittance should carry a physi- 
cal token and also be challenged for some- 
thing they know, such as a PIN or password. 
Although it's possible for a thief or hacker to 
have one of these elements, possessing both 
is much harder. 

Not least of all, it can help to think of 
physical security in terms of concentric 
layers of protection. The cases protect the 
CPUs, the locked racks protect the servers, 
the locked computer room protects the 
racks, and so on. This extends beyond the 
building to the ring of concrete or steel 
bollards around the perimeter, and then 
the fence around the bollards. You can 
improve your data center's physical securi- 
ty by having monitoring of some sort at 
each ring, whether that's an alarm signal or 
a guard booth. 

The sky's the limit regarding physical 
security. If done properly, there may never 
be evidence of security measures paying 
off, and this can make it hard to determine 
solution value and ROI. But perhaps think- 
ing of security such as fire prevention will 
help. Fire has less than a 1% occurrence 
rate, but any amount of preventive money 
spent would have been worth it compared 
to experiencing just one catastrophic fire. It 
only takes one security compromise to cost 
an enterprise millions. 



Newton Security Tailgating and 
Piggybacking Detection/Prevention 



NEW PRODUCT 



by Nathan Lake 




Let The Good In, Keep The Bad Out 



Although nearly all enterprises have 
security strategies for keeping outsiders 
from reaching the corporate network, not 
all organizations realize the dangers 
from internal threats such as criminals 
getting into areas of the building where 
they have access to sensitive informa- 
tion. Badge and biometric security sys- 
tems alone are not foolproof because 
most electronic access control systems 
do not take into account the people that 
employees allow into the facility, such as 
when a polite worker holds the door 
open for the next person. With Newton 
Security's T-DAR (Tailgating and 
Piggybacking Detection/Prevention) sys- 
tem, you won't have to worry if your 
employees' good nature will allow unau- 
thorized individuals to circumvent your 
security system and gain access to sensi- 
tive material. 

T-DAR adds 3D stereo machine vision 
technology to your existing security con- 
trols to accurately detect the number of 
people attempting to enter the secure 
area. If more than one person at a time 
attempts to enter the secure location, T- 
DAR delivers real-time alarm activation 
and sends event camera playback to cen- 
tral security. Newton Security's technol- 
ogy is so advanced that it can differenti- 
ate between people and carts, parcels, or 



NEWTON 



SECURITY 



INC 



Newton Security T-DAR 

Adds 3D stereo machine vision technology 
to your existing door security controls. 

other objects. T-DAR can be combined 
with other restrictive devices, such as 
automatic immigration gates, security 
revolving doors, portals, and mantrap 
systems. 

By managing the flow of employees, 
the T-DAR system can decrease the 
amount of security personnel at secure 
entrances, exit points, and throughout 
the building. Additional models are 
available to enhance your security with 
extra features such as people counting, 
direction sensing, waiting line tracking, 
and time and attendance monitoring. 
Architectural modifications are not 
required. T-DAR integrates seamlessly 
with any existing access control systems. 



(425) 251-9494 
www.newtonsecuritylnc.com 
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FEATURED COMPANY 



Advanced 

Network 

Security 

Imperva Offers New & Innovative Ways 
To Protect Your Network From Breaches 



by Robyn Weisman 

Networking security solutions pro- 
vider Imperva has an impeccable pedigree 
for its specialty. Its founder and CEO 
Shlomo Kramer has been an integral part 
of the network security space since he co- 
founded Check Point Software Technol- 
ogies back in 1993. After helping to create 



End-To-End Data-Centric 
Network Solutions 

According to Contos, Imperva believes 
that network threats are for the most part 
targeting data security issues rather than 
the old paradigm of network security 
issues. "Because we look at Web applica- 
tions and the database, we're the only 



company out there that covers any end-to- 
end solution for all things data-centric," 
Contos says. "We'd like to continue push- 
ing that forward." 

Contos explains that focusing on the 
network ultimately makes for a better 
solution than focusing only on the data 
itself. "If you asked anybody about securi- 
ty a few years ago, they would tell you 



I do a really great job. But you can mitigate 
[attacks] with data-centric controls, such 
as Web application firewalls, database 
firewalls, and database activity monitor- 
ing [tools], and that's what we offer," 
says Contos. 

SecureSphere Central 

Imperva' s SecureSphere appliance is the 
central component around which all the 
company's solutions revolve. Imperva 
offers several different models, including 
those that have fault tolerance capabilities 
and those that can handle copper and dif- 
ferent fiber interfaces. Imperva also offers 
a series of management servers called 
SecureSphere MX that integrates the con- 
figuration and monitoring of distributed 
SecureSphere gateway deployments. 

SecureSphere Standard Edition offers 
affordable, effective data security for 
SMEs, with automated protection against 
data-centric attacks. It comes with Im- 
perva' s WAF (Web Application Firewall) 
and its DAS (Discovery and Assessment 
I Server), which give users the ability to 
I assess database vulnerabilities, as well as 
provide means to fix them. "It will go out 
and find all of your applications and data- 
bases and classify all the data, so essentially 
you know what you're trying to protect," 
Contos says. "You know what the bad guys 
are targeting, you know what type of data 
they can take, [and] you know where they 
reside, so you can apprise appropriate con- 
trols at that point." 



organization, Imperva' s database solu- 
tion lets IT administrators and data cen- 
ter managers secure the system from 
them. "Since you're handling security 
outside of the database, there is nothing 
for [malicious users] to delete and no 
tracks to hide because they don't even 
know it's there," Contos says. 

Contos presents a real-world example of 
how Imperva's database solutions can 
limit damage caused by malicious hackers. 
Most states have breach disclosure laws, 
which means that if a database storing a 
million customer records gets hacked, you 
need to be able to show evidence of what 
occurred. "If you don't know the specifics 
of the intrusion, you have to tell these mil- 
lion or so customers that their data was 
compromised," which Contos says could 
lead to having to buy the customers credit 
card monitoring services for a year, possi- 
bly losing them as customers, facing bad 
PR, and/or losing revenue. "Replay the 



Imperva 



same scenario where you're running our 
Database Firewall and DAS. You have 
empirical evidence that the hacker only 
accessed [a single] table that contains 
records for 100 customers," Contos says. 
"With hacking, it's not a question of if but 
of when. And when it happens, you want 
to make sure you're limiting your liability 
as much as possible." 

Using Attackers Against Themselves 

ThreatRadar, Imperva's latest add-on 
security solution, provides automated 
defense against automated attacks leverag- 
ing the strengths that these sorts of attacks 
use. "It's an industry-changing solution 
[because] we take that automation and 
turn it on its ear," says Contos. "We track 
botnets, phishing sites, spammers, mali- 
cious IP addresses, hostile geographies, 
and other things of this nature, all of 
which change by the minute, and update 
our customers' solutions with these. It's 
like a real-time antivirus update that's 
constantly being pushed to our custom- 
ers," he says. 

According to Contos, the big upside for 
ThreatRadar users is that they no longer 
have to waste time dealing with these 
automated attacks because ThreatRadar 
will automatically block or redirect that 
traffic. "Now, instead of looking at those 
10,000 attacks, you know what's happen- 
ing and can run reports, but you don't 
have to focus on these basic industrialized 
hackers," says Contos. "You can focus on 
advanced persistent threats, or APTs — the 
ones that are directly targeting your busi- 
ness — without getting inundated with all 
that noise." 
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numerous network security solutions at 
Check Point, he went in his own direction 
and founded Imperva in 2002. 

Brian Contos, chief security strategist at 
Imperva (www.imperva.com), says that 
even though there were plenty of network 
security solutions available, Kramer 
noticed that none of these solutions specif- 
ically addressed application and data secu- 
rity. "He wanted to put a specific focus on 
data security for protecting Web applica- 
tions and databases," Contos says. 

Eight years later, Imperva now has cus- 
tomers from a wide range of verticals, 
including three of the top five U.S. com- 
mercial banks; more than 60 state, local, 
and federal government agencies or 
departments; and top healthcare providers, 
grocery stores, and utilities, in addition to 
more than 100 SMEs in various fields. 
Accor North America, GoDaddy.com, 
Agilent, and Vonage are among the many 
companies that have all deployed Imper- 
va solutions. 

"We have a global reach right now 
with thousands of customers worldwide, 
and we want to continue growing that 
into both midsized businesses as well as 
large enterprises and service providers," 
Contos says. 



they have a network firewall, antivirus 
protection, an IDS, VPN, and things like 
that. These are all important. But today's 
attacks, like SQL injections, cross-site 
scripting (XSS), [and] cross-site request 
forgery (CSRF), are focused on the appli- 
cations and databases at the applica- 
tion/database layer. It doesn't matter 
whether the attacks are coming from an 
insider or an outsider [because] data is 
data," says Contos. 

But too many organizations are trying to 
stop data-centric attacks with yesterday's 
technology. "It's a bit like stopping rain- 
drops with a tennis racket. It' s not going to 



Next-Generation Advantages 

Imperva considers its WAF a next- 
generation Web application firewall 
because of its ability to profile the ways 
in which users interact with applications 
and to track user activity from the appli- 
cation into the database and back so that 
administrators obtain an end-to-end 
stream of what users are doing. "Nobody 
else in the industry can do correlation at 
the data level because they don't have 
the second component, which is our 
Database Firewall and our DAS, which 
provides all those same things that our 
WAF provides with the addition of a full 
data audit for the database outside of the 
database," says Contos. 

There are obvious advantages to audit- 
ing databases using an outside appliance 
solution like the one Imperva offers. First 
off, any substantive audit done on a data- 
base kills performance. "Nobody buys a 
database saying let's size it for running a 
full-blown audit," Contos says. 

In addition, if for whatever reason 
you have a malicious user inside your 



Featured Imperva Products 



Database Firewall 



SecureSphere 
Appliances 



ThreatRadar 



Web Application Firewall 



Description 



Protects databases from attacks, data leakage, and other unautho- 
rized activity without impacting the performance of the database 
itself. Also provides independent audit trail of user activity. Offers 
built-in security policies, rules, and reports for a range of regulations, 
including HIPAA and Sarbox. 

A selection of high-performance network security appliances that 
provides a reliable, scalable platform and starting point for Imperva 
network security solutions. 

Automated add-on security service for the Web Application Firewall 
that defends against automated attacks, such as those from botnets, 
phishing sites, and other malicious sources. 

Protects Web applications from SQL injection, cross-site scripting, 
and other sophisticated attacks and provides user profiling and other 
automated reporting capabilities to manage security policies. 



(650) 345-9000 
www.imperva.com 

• Imperva specializes in end-to-end 
security offerings that protect applica- 
tions and data from security breaches 
and data leaks. 

• The company's products provide cus- 
tomers with an audit trail that tracks 
user activity, which is important for 
regulatory compliance. 

• "Because we look at Web applica- 
tions and the database, we're the 
only company out there that covers 
any end-to-end solution for all things 
data-centric," says Brian Contos, chief 
security strategist at Imperva. 
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Ensure your solutions deliver the best business value for next generation I/O. 

With innovative I/O Solutions, Adaptec products protect data, reduce capital and operating costs, lower 
power consumption, and dramatically increase server/storage utilization and performance. In addition, 
products can be Integrated seamlessly with the latest servers; no special confgurations required. 

Our products offer: 

• Maximize I/O performance. The highest-performing I/O hardware and software is coupled 
with the ability to route, optimize, and protect data as it moves through the I/O path. 

• Reduce capital expenses. Improved server and storage utilization at the maximum I/O 
performance minimizes the number of required servers and storage devices. 




adaphec 

partnerPlus 



Reduce operating expenses. Existing server and storage systems are more effectively 
managed, lowering power and maintenance costs as well as physical space requirements. 

Achieve "Green iT" objectives. Minimizing the number of servers and storage devices 
reduces direct system power and cooling power requirements throughout the data center. 
With more than a quarter-century of expertise, Adaptec sets the standard in storage I/O. 



Get the latest I/O innovations 
www.adaptec.com/partners/promo 
800-442-7274 or 408-957-7274 
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Next-Generation Firewalls Protect Your Data 

Palo Alto Networks Redefines Network Security 



by Tessa Warner Breneman 
• ■ ■ 

Palo Alto Networks has developed 
next-generation firewall technology that 
enhances your protection against evolving 
threats targeting your users and data. 
These firewalls identify applications 
regardless of the port, protocol, and SSL 
encryption, and they let you control 
access to Web 2.0 and other applications 
based on user identities rather than IP 
addresses. This helps keep your network 
and your data safe from increasingly 
sophisticated cyber criminal activity. 

Firewalls from Palo Alto Networks 
offer enhanced network security through 
the company's App-ID, User-ID, and 
Content- ID technologies to deliver unpar- 
alleled visibility and control so security 

Palo Alto Networks PA- 
500, PA-2020 & PA-2050 
Firewalls 



(973)210-3023 

www.hlcnetworks.com/products/PAN 

Next-gen firewalls use Palo Alto Networks' 
sophisticated technology to secure networks 
and prevent 
threats, even 
in high-traffic 
situations. 



HIC 
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personnel can selectively allow business 
productivity applications on the network 
while blocking harmful or unnecessary 
application traffic. The firewalls can also 
scan applications for threats, removing 
the need for a standalone IPS product. 

Palo Alto's next-gen firewalls are also 
equipped to handle heavy network traffic 
flows with dedicated processing and 
memory for the data and control planes. 

The PA-2000 Series includes the PA- 
2050 and the PA-2020 for medium-sized 
enterprises and large branch offices. The 
PA-2050 offers IGbps firewall through- 
put, 500Mbps threat prevention through- 
put, and 300Mbps IPsec VPN throughput. 
The PA-2020 provides 500Mbps firewall 
throughput, 200Mbps threat prevention 
throughput, and 200Mbps IPsec VPN 
throughput. Both models support 15,000 
new sessions per second. The PA-2020 
can support up to 125,000 sessions, while 
the PA-2050 tops out at 250,000 sessions. 

Midsized enterprises or branch offices 
can also use the PA-500 firewall to 
protect their networks. It features 
250Mbps firewall throughput, 100Mbps 
threat prevention throughput, and 
50Mbps IPsec VPN throughput. It offers 
7,500 new sessions per second and up to 
64,000 sessions. 

With Palo Alto's next-gen firewalls, 
you can be sure that your network and 
data are safe from malicious applications 
and prevent inadvertent data leakage by 
your users. 
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Instant Server Recovery 

CMS Products BounceBack Server 
Keeps You Up & Running 



by Kris Glaser Bmmbila 

Server downtime can be a serious issue 
if you don't have the right tools to help 
you get back on your feet. BounceBack 
Server from CMS Products can save your 
organization precious time by backing up 
your entire Windows server on an external 
eSATA or USB drive. 

"Given that almost everything in a 
small business is handled through its 
computer system, [including] inventory 
records, point-of-sale transactions, 
accounting data, customer data, etc., hav- 
ing that system unavailable for use can 
have a very damaging effect on a business 
in terms of lost revenue and negative 
impact on their customers," says Gary 
Streuter, vice president of marketing at 
CMS Products. 



CMS Products 
BounceBack Server 



(800)327-5773 
www.cmsproducts.com 

Instant, one-button recovery to an external eSATA 
or USB drive to help avoid lengthy downtimes. 
$285 (download); $295 (CD/box); ABS-Server 
backup systems start at $399 
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Restart Your Server 

From Your Exterrjaf eSATA/USB Hard Dfive 
I "An Indiisliy Firsl " 



CMS 



The BounceBack Server software, 
which you can purchase individually or 
installed on an ABS-Server drive with 
capacities ranging from 1TB to 4TB, 
offers a range of backup and restore 
options to fit the needs of any organiza- 
tion. For starters, the Instant Server 
Recovery option immediately restarts 
your server from your external backup 
drive. Instant Server Recovery "provides 
small-business users with the opportuni- 
ty to keep their Windows Server business 
system up and running in the event of a 
hard drive failure," Streuter says. 

With BounceBack Server, you can 
recover your entire server to its last 
backed up state with One Button Recov- 
ery or use the QuickRestore tool to rein- 
state individual files and folders. You can 
customize which data you want to back 
up, choose multiple backup destinations, 
encrypt with 256-bit AES encryption, or 
store your server information on a local 
or mapped network drive. BounceBack 
Server also lets you schedule a date and 
time to perform an automatic, unattend- 
ed backup. 
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News 



I Aruba To Acquire Azalea Networks 

Aruba announced it will acquire Milpitas, 
Calif., -based startup Azalea Networks, which 
specializes in outdoor mesh wireless technol- 
ogy. Aruba will pay $27 million in stock and 
$13.5 million in cash over the next two years 
for the company. Aruba says the startup 
earned $5 million in revenue last year, and 
most of its customers are in China. The 
acquisition will allow Aruba to deploy 
advanced wireless mesh networks, especially 
to companies that are based outdoors, such 
as oil rigs and other remote operations. 
Azalea has produced more than 25,000 mesh 
nodes worldwide since its inception. The deal 
is expected to close by the end of August. 

I Google Invests In Wind Farms 

Google made its first direct investment in a utili- 
ty-scale renewable energy project by investing 
about $39 million in two wind farms located in 
North Dakota. Rick Needham, Google Green 
Business operations manager, wrote in a blog 
that the farms, developed by NextEra Energy 
Resources, generate 169.5 megawatts of 
power, a supply that can power more than 
55,000 homes and reduce reliance on fossil 
fuels. 'To reach a clean energy future, we need 
three things: effective policy, innovative tech- 
nology, and smart capital," Needham wrote. 
Google has been working on energy-related 
policies and funding research previously 
through its Google.org arm. Needham added 
that the North Dakota wind farm uses "some of 
the latest wind turbine technology and control 
systems to provide one of the lowest-cost 
sources of renewable energy to the local grid." 

I Sophos To Sell Majority Interest 
In Company 

Security and data protection company Sophos 
announced it has reached a definitive agree- 
ment to sell a majority interest in the company 
to Apax Partners in a deal valued at $830 mil- 
lion. Upon completion, Sophos founders Dr. 
Jan Hruska and Dr. Peter Lammer will retain a 
significant minority shareholding in the compa- 
ny. Minority shareholder TA Associates will sell 
its complete interest in Sophos to Apax. 
Sophos, which claims 100 million-plus users in 
more than 150 countries, cited fiscal year-end- 
ing billings that topped $330 million (vs. $273 
million for fiscal year 2009), revenue exceed- 
ing $260 million (vs. $213 million), and a 
unlevered free cash flow of about $55 million 
(vs. $40 million). Apax Partners' Salim Nathoo 
says, "Sophos is a very strong platform and is 
gaining market share. Apax's strong track 
record and industry-specific knowledge in the 
technology sector makes Sophos a perfect fit, 
and we look forward to working closely with 
this high-growth business going fonward." 

I Sprint Reports Loss 

Sprint Nextel continued to 
see subscriber and profit 
losses during its first 
fiscal quarter. The 
nation's third- 
largest wire 
less carrier 
posted a 




loss of $865 million for the quar- 
ter, and revenue fell 2% to $8.09 
billion from $8.21 billion a year ago. 
That beat analyst forecasts of $8.05 billion. 
Sprint says it lost 75,000 subscribers during 
the quarter, compared to 182,000 during the 
same quarter last year. The company lost 
578,000 contract-signing customers, but it 
added 348,000 prepaying and 155,000 
wholesale customers. Sprint expects that the 
deployment of its 4G network, which could 
cover up to 120 million people by the end of 
the year, will help return it to profitability. 



STORAGE 



CASE STUDY 



All In One 
& One For All 

Unitrends Data Protection Units Ensure 
Disaster Recovery, Business Continuity 



by Julie Sartain 

Disk-to-disk data protection and rapid 
recovery appliances for backing up your 
data and applications are a critical necessi- 
ty that cannot be ignored. Add disaster 
recovery protection to that appliance, and 
your company can rest knowing that its 
most precious asset — its data — is secure. 

Sharonview Federal Credit Union, head- 
quartered in Fort Mill, S.C., was using a 
tape backup system for data protection 
with no real disaster recovery options. "As 
we grew, we faced a dramatically increas- 
ing quantity of data. We were expanding 
our network infrastructure, and the com- 
plexity of our storage environment was 
growing with it," says Mark Johnson, CIO 
at Sharonview. 

"In 2005, we decided it was time to get 
away from our painstaking tape backup 
process. . . . Our tape backups were a 
hassle to manage and required a manu- 
al review of logs to determine whether 
backup jobs were successful. In addi- 
tion, there was no way to fully recover 
all of our failed data," he says. 

"We initially tried to solve our prob- 
lem with a new tape backup solution 
and tape library," adds Johnson. "But 
this didn't solve our problems. We needed 
something that offered better speed and reli- 
abiUty and allowed us to improve our disas- 
ter recovery readiness when we consolidated 
all branch location servers into one state-of- 
the-art data center in Fort Mill, S.C." 

The Chosen 

Sharonview contacted Unitrends (www 
.unitrends.com), headquartered in Columbia, 
S.C, about its situation, and Unitrends was 
able to provide a working solution. Uni- 
trends offers three product family categories: 
on-premises LAN-based Data Protection 
Units, offsite protection with Data Protection 
Vaults, and disaster recovery services to a 
cloud-based environment with Vault2Cloud. 
This family of both rack-mounted and stand- 
alone Data Protection Units has a range of 
storage capacities. 

"We provide integrated appliances that 
are specifically designed for disaster 
recovery and data protection processes," 
says Mark Campbell, Unitrends CTO/ 
COO. "These are the appliances that small 
and midsized businesses need for data pro- 
tection, and they are much more efficient 
and reliable than traditional tape-based 
backup processes." 

Unitrends provides data protection 
appliances for protecting and restoring 
critical data and systems, Campbell says. 
"The on-premises DPUs that Sharonview 
is using for local backups eliminate the 
need for multivendor software and hard- 
ware and, coupled with our world-class 
customer support, provide a simple and 
elegant, integrated solution." 

Campbell explains that the Unitrends 
appliance is integrated with the Unitrends 



Rapid Recovery Console, a software-based 
protection solution for operating systems, 
applications, and user data. It supports 
more than 100 operating systems and 
applications using a Web-based interface, 
including programs such as Microsoft 
Windows, Microsoft Exchange, Microsoft 
SQL, Microsoft Hyper- V, VMware, Sun 
Solaris, Novell, Linux, Apple Mac OS X, 
SCO UnixWare, and SCO OpenServer on 
notebooks, PCs, workstations, and servers 
plus DAS, NAS, and SAN storage. These 
systems can all be backed up using a single 
backup appliance. 

Three Units 

According to Campbell, Sharonview uses 
three Unitrends DPU-2000 Data Protection 
Units. These units connect to the organiza- 
tion's LAN and provide disk-to-disk data 
backup and disaster recovery features. They 



The Challenges 

According to Johnson, many of Sharon- 
view's servers run 24/7, and its member 
customers expect to be able to perform 
transactions online without any downtime. 
Because of those high expectations, there 
was no time for backups; in other words, 
the company could not shut down opera- 
tions for maintenance. 

"I knew we couldn't meet this need using 
a traditional tape backup product," says 
Johnson. "We needed a disk-to-disk-based 
solution. We also needed to encrypt critical 
financial data to meet privacy and security 
requirements. Unitrends met these needs, 
while also demonstrating high reliability, 
ease of use, and exceptional value." 

With Unitrends, Sharonview can per- 
form individual file recovery in minutes 
vs. hours, Johnson says. "We now have 



Unitrends 



TM 



also offer up to 6TB of raw storage or up to 
24TB of iseReduced (a technology that 
uses advanced compression) storage and 
perform disk-to-disk-to-disk rotational 
archiving for complete data protection. 

"We originally purchased two Unitrends 
DPU-2000S and an offsite Unitrends Data 
Protection Vault," says Johnson. "We use 
the DPU-2000S to back up our SANs and 
individual servers and then vault the data to 
another location using the Data Protection 
Vault for disaster recovery assurance. We 
also use the Unitrends BareMetal recovery 
feature for whole system protection and the 
Unitrends Exchange Agent included in the 
solution for email protection. In addition, 
our backups are encrypted with InCrypt 
256- AES encryption for security." 

"We installed the Unitrends solution in 
2006 with great success," Johnson says. "It 
was easy to use right from the start. And, 
following this successful implementation 
and efficient performance results, we decid- 
ed (just recently) to upgrade to Unitrends' 
latest technology to accommodate our 
growing data store. We now have three 
new Unitrends appliances in place, so we 
have reduced our backup window again." 

According to Johnson, training was also 
a breeze, and because the program is so 
intuitive, there was very little learning 
curve. "When we migrated from tape to 
Unitrends five years ago, we cut our back- 
up time way down. Then we cut it in half 
again when we upgraded to the latest 
Unitrends hardware earlier this year. We 
have been so happy with the company and 
the products [that] when it was time to 
expand after five years, we didn't even 
look anywhere else." 



highly reliable backup and recovery plus 
disaster recovery, all provided through 
Unitrends' ability to perform offsite vault- 
ing to a remote location," he adds. 

Johnson notes that before Unitrends, 
there was also no way to fully recover a 
failed server, and Sharonview' s efforts to 
back up remotely over the WAN proved 
unworkable, even after the company con- 
solidated to a single tape library. 

"We found reporting was not only cum- 
bersome, it could also be inaccurate," 
says Johnson. "Sometimes, I would see a 
file in the tape catalog, but when we 
attempted to recover it, there was a prob- 
lem and the file backup was not actually 
there. The logistics of finding a specific 
file version might require browsing the 
catalogs from several tapes, which could 
take hours. Now with Unitrends, the 
reporting is seamless and easy, and the 
backups are always reliable. " 



Unitrends DPU-2000 with 
Offsite Data Protection Vault 
& BarelVletal Recovery 



A data protection appliance designed for 
on- and off-premises business continuity 
and disaster recovery. 

"We now have highly reliable backup and 
recovery plus disaster recovery, all provid- 
ed through Unitrends' ability to perform off- 
site vaulting to a remote location," says 
Mark Johnson, CIO at Sharonview. 

(803) 454-0300 | www.unitrends.com 
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How Should SMEs Start 
Using Cloud Storage? 

Backup, Archiving & Storage Are All Possibilities 



by George Crump 

Cloud storage has matured to the point 
where it is ready for use by data centers of 
all sizes. This storage tier is uniquely dif- 
ferent from any other storage platform that 
may have been in use by SMEs in the past. 
It has an almost limitless, pay-as-you-go 
capacity but also has unique bandwidth 
constraints that have the perception of lim- 
iting its usefulness today. So how does an 
SME begin to take advantage of this new 
storage platform? 

Backup 

One of the safest and most common uses 
of cloud storage is its use for data protection, 
and according to Stephen Foskett, consulting 
director at Nirvanix (www.nirvanix.com), 
it's one of the more popular uses. "Backup 
software applications have added a cloud 
storage option as an alternative backup desti- 
nation." For backup application developers, 
cloud integration is straightforward and 
often can be done in a few weeks. 

In most cases, however, SMEs consider 
cloud storage as an area to store backups for 
disaster recovery. An internal backup infra- 
structure is needed, but for those SMEs that 
don't have an ideal disaster recovery target, 
a cloud option could be ideal. 

Some SMEs may not want to invest in an 
internal infrastructure and want to store all 
their backups in the cloud, or they may not 
want to upgrade to a new application and 
infrastructure that supports cloud storage. 
"SMEs that want to leverage the cloud as 
the primary backup storage location are 
going to need more than the current 
consumer-grade services that are on the 
market," says Justin Moore, CEO and co- 
founder of Axcient (www.axcient.com). 

Consumer systems have no local storage 
presence, making both the initial backup 
and a full system recovery very time-con- 
suming processes, based on the capacities 
of the typical SME server. At the opposite 
end of the spectrum are the backup applica- 
tions that need an internal infrastructure 
and use cloud storage as an additional loca- 
tion to store disaster recovery copies. 



Key Points 



• Cloud storage does not require custom 
programming. 

• Cloud storage performance issues can be 
resolved with a mix of on-premises and off- 
premises storage. 

• An ideal starting point for cloud storage 
is for backup or archive, but SIVIEs 
should keep an eye on its use for 
primary storage. 



"The alternative is to look for a hybrid 
approach to cloud backup. This can be 
accomplished by installing a device locally 
that acts as a storage area for the most recent 
backups and then migrates those backups 
to cloud storage," continues Moore. The 
advantage of this approach is that the SME 
no longer has to manage a complex backup 
storage infrastructure. As space is needed on 
the appliance, data is migrated to cloud stor- 
age, yet the most recent copy of data is still 
available locally for fast recoveries. 

Archiving 

SMEs also should consider using cloud 
storage as an archive destination. Doing so 
reduces the amount of storage they need to 
manage locally and at the same time reduces 
power and cooling costs for that storage. 

Cloud storage companies have leveraged 
a hybrid approach similar to backup solu- 
tions to make this easy for the SME market 
to implement. "By providing a NAS front 
end to cloud storage, businesses can use 
methods as simple as copying the data to 
the NAS front end to move data to the 
cloud. This opens up cloud storage for all 
SMEs with data to archive and provides a 
bridge to the cloud while applications catch 
up," says Daniel Stevenson, Iron Mountain 
Digital's director of partner marketing 
(www.ironmountain.com). 

"The cloud NAS concept provides a 
simple and familiar way to use cloud stor- 
age as an archive destination," agrees 
Gustavo Sosa, product manager at Tek- 
Tools (recently acquired by SolarWinds; 



www.tek-tools.com). "By using tools that 
can identify infrequently accessed data, 
SMEs then move that data to the cloud by the 
use of a simple copy command. Even better, 
the same tools used to identify the old data 
may be able to automatically move it to the 
cloud based on user-defined policies. Further, 
they can then use those same tools to track 
and analyze the data they have moved since it 
appears to be on a local NAS appliance." 

Primary Storage 

The progression of cloud storage has 
come to the point where some customers 
are using it as primary storage. Although 
vendors are not currently shipping SAN or 
block-based systems leveraging the cloud, 
there are a growing number of NAS or file 
serving types of services and systems. 

"To use cloud storage as a primary stor- 
age point, you are either going to need a 
very fast Internet connection or some way 
to cache or store data locally," says Andres 
Rodriguez, CEO with Nasuni (www 
.nasuni.com). "Many companies in the 
SME market only use a NAS to store files. 



They are not using it to store application 
data or other high-end uses. In the file serv- 
er use case, NAS cloud storage with a very 
small local cache can be ideal. This keeps 
bandwidth costs at a minimum and if the 
NAS can be delivered as software, it keeps 
internal implementation costs down." 

This cache type of approach still pro- 
vides excellent local performance for the 
most active files while at the same time 
providing the near infinite storage capabili- 
ties and the intrinsic protection capabilities 
of cloud storage. Alternatively, all the NAS 
storage can be moved offsite to the cloud 
storage provider. Rodriguez suggests that 
many SME data centers do not need a 
cache larger than 128GB, which is about 
the size of many SSDs. 

Another option is using cloud storage to 
provide NAS services with no on-premises 
hardware or software. "Cloud storage 
deployed within 100 miles of the data cen- 
ter can provide excellent NAS performance 
using standard CIFS and NFS connec- 
tions," says Jeff Treuhaft, CEO and co- 
founder of Zetta (www.zetta.net). "What 
surprises many customers is how accessible 
and affordable high-speed metro-area band- 
width connections are today. High-speed 
metro connections are much faster than 
ever and the cost of the bandwidth is much 
less expensive than connections were just 
two or three years ago." 

For customers outside of the 100-mile 
range, Treuhaft advises that customers 
look to use other industry standard proto- 
cols such as WEBDAV or FTP, but he 
points out that it does not mean that they 
need a proprietary protocol to obtain 
acceptable performance. 
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Not Sure What To Do With Used Data Tape? 

Recycle Your IVIedia Offers Secure, Green Tape Destruction 



by Marty Sems 
• • • 

Tape backup is a fact of life. Cartridges 
are reliable and cost-effective, and they 
can be encrypted and moved to offsite 
data storage for maximum protection 
from catastrophes and theft. 

But there's a question of the best 
method for tape disposal. Many enterpris- 
es have policies that require them to get 
rid of tapes of a certain age, even though 
they may still have life left. It' s critical to 
erase the data on those backup tapes, both 
for corporate and customer privacy rea- 
sons. Plus, it costs money to have a car- 
tridge shredding service physically 
destroy old tapes, which usually end up 
taking up space in a landfill. 

Recycle Your Media offers a reverse 
logistics solution to help you recycle 
tapes. The Newport Beach, Calif., compa- 
ny will buy quantities of 100 or more used 

Recycle Your Media 



(949)757-0100 
www.recycleyourniedla.com 

Buys old tape media and recycles what is no 
longer usable, then puts the rest through a 12-point 
recertlflcatlon process before reselling them. 

rcleYourMedia 



data tapes from your business at "fair mar- 
ket value," arranging and paying for 
secure shipping, turning an IT expense 
into a modest source of income. 

Recycle Your Media is in the market 
for a variety of tape formats, including 
SDLT, LTO, and 3592. The company's 
technicians offer secure data destruction, 
obliterating any lingering data from the 
media and then subjecting each cartridge 
to a chemical cleaning and close inspec- 
tion. The firm estimates that one out of 
every five tapes doesn't make it through 
its stringent, 12-point recertification 
process. Certified tapes are then offered 
for resale at lower prices than new car- 
tridges, which offers your IT department 
an inexpensive source of known 
good backup media. 

Recycle Your Media's data disposal 
practices are designed to help your SME 
meet its regulatory compliance obliga- 
tions and its need to protect sensitive 
information. Recycle Your Media con- 
trols the entire media chain of custody, 
so it is able to supply your enterprise 
with legal proof of data destruction. 

Tape recycling gives your company 
another way to demonstrate its environ- 
mental conscientiousness. By keeping old 
tapes out of the trash. Recycle Your Media 
can assist your enterprise with its "green" 
credentials, which can bring in additional 
customers. Smarter resource utilization 
benefits us all, but it's nice when it benefits 
your bottom line, too. 



Use Cloud-Enabled Applications 

Cloud-enabled applications go beyond using cloud storage for traditional storage tasks such as 
backup and archiving. By leveraging APIs, an application can be extended to use in the cloud for 
its own internal storage or archiving. 

"One of the best areas to perform the data center storage to cloud storage connection is right 
inside of the applications they are using," says Daniel Stevenson, director of partner marketing for 
Iron Mountain Digital (www.ironmountain.com). "Cloud storage providers need to be working with 
independent software developers (ISVs) to add cloud storage as an extension to their normal 
applications and make its use seamless to the users." 

Stephen Foskett, director of engineering at Nirvanix (www.nirvanix.com), says that "larger enter- 
prises have their own application developers that can leverage cloud storage, but the SME data 
center may be better served if the applications they use add cloud capabilities. ISVs can write to 
APIs from cloud providers to add cloud storage support to their applications." 

Foskett continues, "If ISVs could enable the applications you already own, it may be the simplest 
on-ramp to cloud storage for the SME. If application developers can make cloud storage an 
option to check off within the program, cloud storage use becomes seamless." 
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nail Security 



Barracuda Spam & Virus Firewall 




Cisco Spam & Virus Blocker 




The Barracuda Spam & Virus Firewall is available in eight models and supports up to 
100,000 active users with no per-user licensing fees. Its architecture leverages 12 
defense layers: denial of service and security protection, rate control, IP analysis, 
sender authentication, recipient verification, virus protection, policy (user-specified 
rules). Fingerprint Analysis, Intent Analysis, Image Analysis, Bayesian Analysis, and a 
Spam Rules Scoring engine. In addition, the entire Barracuda Spam & Virus Firewall 
line features simultaneous inbound and outbound email filtering with the inclusion of 
sophisticated outbound email filtering techniques, such as rate controls, domain restric- 
tions, user authentication (SASL), keyword and attachment blocking, triple-layer virus 
blocking, and remote user support for outbound email filtering. The Barracuda Spam & 
Virus Firewall's layered approach minimizes the processing of each email, which yields 
the performance required to process millions of messages per day. 

• Blocks spam, viruses, phishing, and other email attacks 

• Forwards only legitimate email, reducing load and storage on mail servers 

• Supports per-user customer filtering policies 

• Accelerates MS Exchange and Lotus Domino recipient verification 

Best For: SIVIEs looking for an easy-to-use and affordable solution. 
Price: Starts at $699 with no per-user or licensing fees 



As a hardware appliance with a Web-based console, the Cisco Spam & Virus Blocker 
can be configured for offices with 50, 100, or 250 users. According to Cisco, it can catch 
99% of spam, and it has a false-positive rate of less than one in 1 million. Installation is 
designed to be quick and simple, so you can have your device set up and ready to go in 
minutes. Additionally, SenderBase automatically updates to the Cisco Spam & Virus 
Blocker to keep your enterprise safe from the latest spam, viruses, and other malware. 

• Two 2.5-inch 80GB hard drives with 2GB of memory 

• Includes both hardware and software for 50, 1 00, or 250 users 

• Blocks 99% of spam and has a false-positive rate of less than 1 % 

• Uses SenderBase to update the program, so your organization is guarded against the 
most recent viruses and spam 

• Browser-based console and appliance can be set up quickly 

Best For: Small enterprises looking for spam and virus protection. 



(888) 268-4772 
www.barracudanetworks.com 



(800) 553-6387 
www.cisco.com 



Proofpoint Shield 



OF" : 



Proofpoint Shield is a SaaS product that prevents 80 to 90% of spam and other emails 
containing suspicious content from reaching your on-premises appliances. It is designed 
to protect your organization against threats such as unexpected email volume increas- 
es, denial-of-service, and directory harvest attacks. Using Proofpoint's Dynamic Rep- 
utation technology combined with netlVILX technology. Shield determines whether a 
message is accepted, blocked, or throttled. Then Proofpoint IVILX scans the accepted 
message for spam, and if it passes, it gets sent to your on-premises appliance to be 
treated with more security measures to ensure your employees' email inboxes are safe. 

• Works with both Proofpoint and third-party email security appliances 

• Can reduce the volume of malicious emails delivered to your on-premises 
appliance by up to 90% and re-establish normal and predictable email volumes 

• Uses Proofpoint MLX, Dynamic Reputation, and netlVILX technologies 

• Offers flexibility for growing organizations 

• Tightens protection against spam, denial-of-sen/ice attacks, and directory 
harvest attacks 

Best For: Growing organizations looking for a cloud service. 
Price: About $3,750 per 250 employees 



Symantec Brightmail Gateway 
Small Business Edition 




Symantec's Brightmail Gateway Small Business Edition boasts 99% effectiveness, with 
less than one in 1 million false positives. It offers zero-day protection combined with con- 
tent filtering, antispam, and antivirus protection for outbound and inbound email as well 
as instant messenger. The Web-based console lets IT personnel manage policies and 
reporting and view attack and trend information. Also, the Symantec Global Intelligence 
Network provides updates so your organization is protected from the latest threats. 

• Delivers antispam, antivirus, content filtering, and data loss prevention to outbound 
and inbound email and instant messenger 

• Provides 20 filtering technologies, zero-day antivirus protection, and per-domain and 
policy-based TLS (Transport Layer Security) encryption 

• Offers a Web-based console to track attack and trends data and includes a variety of 
reporting capabilities 

• Automatically updates your program to ensure real-time protection against the latest 
threats 

• Appliance offers two 80GB hard drives with Serial ATA RAID 1 

Best For: SMEs with fewer than 250 employees looking for an affordable, comprehen- 
sive solution. 

Price: Sold on a per-appliance basis; about $2,500 for 1 00 users in the first year 



(408)517-4710 
www.proofpoint.com 



(877) 294-5255 
www.symantec.com 
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Processor's Product Spotlight highlights options available in key data center product categories, providing product information side-by-side for easy comparison. 

Compiled by Tessa Warner Breneman 



McAfee Email & Web Security Appliance 



The McAfee Email and Web Security Appliance for SIVIEs combines email and Web 
security for a more efficient and cost-effective security solution. It features antispam, 
antivirus, and anti-malware capabilities combined with zero-day threat protection. With 
the Email and Web Security Appliance, you'll also have protection from worms, rootkits, 
and Trojans. In addition to tough antispam features, the Email and Web Security Appli- 
ance has a low false-positive rate as well as the ability to scan both incoming and out- 
going messages and attachments. It also includes customizable dictionaries, threshold 
counters, whitelists, and content rule wizards to help you set and enforce strict security 
policies. In regard to Web security, you will get URL filtering, quarantine management, 
and help from McAfee SiteAdvisor and McAfee ePolicy Orchestrator. 

• Combines email and Web security in a streamlined and efficient security appliance 

• Enforces usage policies and offers compliance tools 

• Offers find-and-fix solutions and automatically updates itself for protection against the 
latest threats 

• Dashboard includes information such as email and Web traffic views and a list of all 
your security solutions 

• Includes McAfee TrustedSource, SiteAdvisor, and ePolicy Orchestrator 

Best For: SMEs that need both email and Web security solutions. 



(888) 847-8766 
www.mcafee.com 



Trend Micro InterScan Messaging 
Security Virtual Appliance 




Trend Micro's InterScan Messaging Security Virtual Appliance implements antispam and 
antispyware email protection at the gateway to filter malicious content. The antivirus and 
antispyware features also guard against malware tunneling, phishing scams, botnets, and 
zombies. Utilizing Trend Micro's Smart Protection Network and cloud-based services, the 
InterScan Messaging Security Virtual Appliance is precise and quickly responds to threats. 
InterScan Messaging Security Virtual Appliance also features a multitiered approach and 
offers flexible content filtering, hardware selection, and messaging security in order to 
comply with your specific policy. Finally, a central management console accessible from 
any Internet connection streamlines the configuration and reporting of events. 

• Provides flexible configuration and content filtering as well as a centralized 
management console 

• Offers effective and accurate antivirus, antispam, and antispyware tools 

• Features a multitiered approach to spam and phishing protection 

• New capacities to tighten email security are quickly deployed when needed 

• Utilizes Trend Micro's Control Manager and Smart Protection Network tools 

Best For: Organizations looking for a flexible and virtual email security gateway appliance. 

Price: For a perpetual license: $16.86 per user for 1 ,000 users. Renewal/maintenance 
is 40% per year for following years. Multiyear discounts are available. 



Proofpoint Messaging Security Gateway P340 



3roofpoint> ^ 




With a mix of solutions for small to midsized businesses as well as enterprise organiza- 
tions, the Messaging Security Gateway hardware appliance offers enterprise-level MTA 
(Mail Transport Agent) and deep-packet multiprotocol content scanning. Additionally, 
Messaging Security Gateway provides perimeter security, antispam, antivirus, secure 
messaging, and outbound content security. With its plug-and-play deployment, it is sim- 
ple to set up and also easy to administer and maintain using the centralized Web-based 
console. Proofpoint's Enterprise Protection and Privacy Suites are both available. 
Enterprise Protection provides a comprehensive list of Proofpoint's email security and 
management features, while Privacy protects all your private information. 

• Proofpoint Enterprise Protection Suite includes connection management, spam 
detection delivered by Proofpoint MLX, signature-based and zero-hour virus 
protection, email firewall, deep content monitoring, and outbound filtering 

• Proofpoint Enterprise Privacy Suite offers a solution for organizations with strict 
regulatory compliance and data privacy requirements 

• Offers plug-and-play deployment and centralized Web-console for simple administration 

• Uses Proofpoint MLX technology to accurately identify malicious content in emails 
and other files 

• P340 appliance model offers a 250GB mirrored capacity combined with support for 
up to 60,000 messages per hour 

Best For: Those looking for an appliance that's easy to manage and deploy. 

Price: $3,995 



(408)517-4710 
www.proofpoint.com 



Webroot Email Security Service 



^^Webroot 



Webroot's cloud-based email security program, Email Security Service, is able to block 
100% of the known email viruses, and it includes zero-hour and heuristic filters to guard 
against unidentified viruses. In addition to scanning inbound messages. Email Security 
Service also filters the content of outbound emails and attachments to guard against 
data loss and performs an image analysis to ensure all the content going in and out of 
employee inboxes is appropriate for the workplace. It is designed to help you to craft 
rules and filters by including premade compliance dictionaries and templates for HIPAA, 
PCI, credit card numbers. Social Security numbers, and more. The Email Security Ser- 
vice also includes corporate email encryption and email archiving. 

• Scans content from more than 300 different types of attached files 

• Because it's in the cloud, employees can still access inboxes and send emails in the 
event of an outage or if a server is down 

• Archives emails by capturing, storing, and indexing them 

• Guarantees it will block more than 98% of spam and phishing email threats 

• Web-based console lets you manage the email policies, track messages, and view 
email traffic with real-time logs and reports 

Best For: Enterprises looking for a comprehensive cloud solution. 



(888) 762-8736 
www.trendmicro.com 



(866) 915-3208 
www.webroot.com 
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MESSAGING & TELEPHONY 



SIX QUICK TIPS 



Email Backup 
& Archival 

Protect Messaging & Your Business 



by Sixto Ortiz Jr. 

■ • ■ 

Billions of email messages are ex- 
changed every day, and the messaging 
torrent shows no signs of abating. IT 
administrators today face the daunting 
task of figm'ing out what to do with all 
those messages. Making matters even 
more complex is the burden imposed on 
organizations by regulations and the 
threat of litigation. 

The stakes for effective email and mes- 
saging preservation are high indeed, so 
organizations must determine the most 
efficient ways to implement email backup 
and archival technologies. Thankfully, 
administrators can use numerous strategies 
to succeed in this critical area. 

Empower End Users 

IT departments can spend quite a bit of 
time just searching for old email messages 
that are backed up or archived. This quest 
can become a real nightmare when IT per- 
sonnel have to search through backup 
tapes or other media. Locating a specific 
message can truly become a "needle in a 
haystack" exercise. 

Patrick Eitenbichler, director of product 
marketing for information management at 
HP, says IT departments spend a significant 
amount of time working on email search 
and discovery tasks from employees. 

"According to a survey by Osterman 
Research in 2007, IT departments received 
an average of 107 end-user requests for 
email search and discovery tasks per year, 
or about two per week," he adds. Time 



BONUS TIPS 



■ Eliminate spam. Kamel 
Shaath, CIO at Kom Net- 
works (www.komnetworks 
.com), says getting rid of 
spam will reduce the volume 
of email to manage. A good 
spam filter should be in place 
and in use. 



spent on recovery, Eitenbichler says, can 
be significant if enterprises have to restore 
individual emails from backup tapes. 

Thus, enabling end users to locate their 
own information can relieve the burden on 
IT personnel significantly. Aseem Asthana, 
product manager at Barracuda Networks 
(www.barracudanetworks.com), says ad- 
ministrators should implement an email 
archiving solution that allows end users to 
retrieve emails from within their native 
email environment (such as Outlook). This 
can enhance productivity and reduce the 
extra work done by the IT group. 

Understand Regulatory 
& Legal Requirements 

Administrators looking to implement an 
archiving and/or email backup solution 
must clearly understand the regulatory and 
legal environment in which they operate. 
This will drive the features and capabilities 
of whatever solution is implemented. 

Tom McCaffrey, director of archiving at 
Kroll Ontrack (www.krollontrack.com), 
points out that organizations that are heavily 
regulated and targeted in litigation face 
increasingly significant risks when attempt- 
ing to optimize and tailor information man- 
agement and data storage practices to meet 
business, legal, and regulatory requirements. 

For starters, he adds, organizations must 
make sure their legal hold tool is integrated 
with an archive so they can maintain control 
over the data in the archive. Such integra- 
tion should include the ability to suspend 
the retention policy until the matter or 
investigation is concluded, McCaffrey says. 



Also, organizations must make sure 
retention policies and archiving practices 
account for each and every kind of data 
subject to compliance regulations or e-dis- 
covery requests, he adds. Besides email 
and loose files, organizations must now 
consider SharePoint, instant messaging, 
unified messaging, social media, and uni- 
fied communications as containing discov- 
erable materials. 

Perform & Test Email Backups 

An Exchange or email server crash can 
bring organizational productivity to its 
knees and potentially eliminate email mes- 
sages that may become important later 
when a lawsuit looms or an important 
piece of business intelligence is needed. 
Backing up email content, including the 
software for managing and running the 
email system, is important. 

To ensure business-critical information 
is managed effectively, organizations 
should conduct data backups regularly, 
says Jim Reinert, vice president of data 
recovery and software products at Kroll 
Ontrack. Also, he adds, organizations 
need to employ a policy and documented 
process, including a detailed record of 
data locations and date ranges, along 
with predetermined process owners and 
scheduled media rotations, so they can 
know exactly what is being backed up 
and where. 

Another tip for effectively doing email 
backup is simple: Test the backup. Mike 
Dull, senior recovery manager at Data- 
chambers (www.datachambers.com), says 
administrators should test their backup solu- 
tion quarterly. Also, they should take notes 
documenting what went well during a test 
and what didn't. If issues that arise during a 
test cannot be alleviated, administrators 
should get help immediately. 

Reinert says double-checking backup 
solutions periodically can reduce risk and 
enable administrators to check the timeli- 
ness of restores and the completeness of 
recoveries without the added pressure of a 
data loss crisis during the process. 

Not Everything Needs To Be Archived 

Even though it might seem that the shot- 
gun approach of keeping every single email 
is the best way to stay in compliance, the 
truth of the matter is that a large chunk of 
email content can be safely deleted. 

Sean Regan, director of product market- 
ing for Symantec's Information Manage- 
ment Group (www.symantec.com), says 
organizations should not get caught in the 
trap of believing that everything must be 
saved or that a perfect policy must be 



Most Sensible Tip: 

Beware Of The Marketer 

Compliance is important today, given the num- 
ber of regulations (Sarbox, HIPAA, etc.) under 
which organizations conduct business. IVIegan 
Wohlford, product manager for Backspace 
(www.rackspace.com), says organizations 
should be aware of companies that claim to be 
compliant with regulatory requirements. 
Administrators should never assume they are 
compliant simply because their archiving com- 
pany says so, she adds. When in doubt, avoid 
getting burned with clever marketing by con- 
sulting compliance officers who understand 
regulatory requirements. 

Most Bang For The Buck: 

Reduce The 
Amount Of Email 

Kamel Shaath, CTO at Kom Networks 
(www.komnetworks.com), says administra- 
tors should define their organization's email 
retention goals and policies, thus enabling 
users to recognize emails that have value to 
the company in terms of business continu- 
ance or regulatory compliance. All emails, he 
adds, should be archived or deleted accord- 
ing to established rules and policies. 



defined before deploying an archiving sys- 
tem. Searching for the perfect policy, 
Regan adds, can not only slow down an 
archiving project but also place an organi- 
zation at risk by potentially having to man- 
age emails subject to legal holds before 
policies and procedures are in place. 

Regan recommends that organizations 
start archiving broadly to enforce retention, 
deletion, and legal holds. Organizations 
should set an infinite retention policy ini- 
tially and then begin to finalize the process 
of developing corporate policy particulars, 
he says. 

Here's another good reason to understand 
retention needs: Many email archiving com- 
panies have hidden limits on the number of 
messages kept or on the length of time mes- 
sages are retained, says Megan Wohlford, 
product manager for Rackspace (www 
.rackspace.com). She recommends that 
administrators be aware of the kinds of data 
users are consuming every day and be pre- 
pared for overage charges. Also, she adds, 
administrators using a company that charges 
in this manner should employ a deduplicat- 
ing strategy to prevent storing multiple 
copies of the same message. ' 



■ Use stubbing. Patrick 
Eitenbichler, director of prod- 
uct marketing for information 
management at HP, says 
organizations can use stubs 
as a storage management 
tool. A stub is a message pre- 
view in the user's Inbox that 



links to the full body of the 
message, which is stored in 
the long-term archive. Stubs 
give users quick access to 
archived material while taking 
up less space in the user's 
inbox and the email server 
than a full message. 



Still paying too much for your 
enterprise KVM over IP? 



• 4 IP users 

• i6 ports 

• Only $1750 



• Supports VNC viewer • Low 
power • Independent local 
user " Advanced OSD • 
Encryption S Authentication 




Global Users 



16 ports and 4 IP users: Adder turns up the 
heat on existing KVM over IP technologies 

New CATxIPsooo challenges existing enterprise KVM perception 



Also Includes enterprise KVM 
management Software 



The AdderView AVX5016 IP 
is \he culmination of Adder's 
KVM over IP expertise. This new 
device offers 4 non blocking 
simultaneous IP connections to- 
gether with a local port (5 sepa- 
rate users), and allows the user 
to control 16 separate devices. 
The AVX5016 IP is very small and 
compact enabling you to fit two 
units side by side to support 32 
computers and 10 sessions in just 
lU of rock space. 



Using Adder's CAM modules, 
you con connect the switch 
via CAT5e coble to any type of 
server including PC, Mac and 
Sun, Country code reporting, 
DDC and continuous keyboard 
and mouse emulation further 
ensure faultless operation across 
your unique installation. 



ADDER.net 







^^^^^^^^^^^^^^^^^^^ 


KVM over IP - KVM Switches - KVM Extenders - AV Extenders - USB Extenders - DVI Extenders ||[ 


Experts in 
Connectivity 
^ Solutions 


LADDER 


KVM over IP C^ill: 888-932-3337 
Solutions ^^^^^^^^^^^^ or visit: www.adder.us 
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CONFERENCE KEYNOTE SPEAKER 



No Apology: 
The Case for 
American 
Greatness 

Governor Mitt Romney 



JUN'E 6-9, 2010 BOCA RATON, F 



I 



ADDITIONAL KEYNOTES 
Emerson/Liebert: Data Center Evolution 

Bob Bauer Group vice President, Emerson • President, Liebert Corp. 

Yahoo: Lower Cost, Higher Performance and 
Faster to Build - Timing is Right to Have it All 

Scott Noteboom l-lead of Globai DC infrastructure, Yahoo 



^ . For more information and- to register, visit www.7x24exGliaage.or'g 
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Generation 
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The end-to-end reliability forum. 
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^ey Reactive Supplier to HP Worldwide 
warded End of Life VAX sales By Compaq ir 
J.S. military-approved component-level repa 



VAX 
Alpha 
PDP11 
StorageWorks 
Advance Exchange 



Repair. Repair. Repair. 
20% discount for repairs 
in Aprii/May 

Call IGS for parts, service, and repair 
or visit us at www.decparts.com 





DEC/COMPAQ/HP REPAIR and SALES, 
SYSTEMS, STORAGE, LAPTOPS, 
LAPTOP SPARES 



Full-blown menu of HP at blow-out prices! Call today with your pa 

(Small sampling menu below) 



HP & COMPAQ 

ts" 



Two stocking Locations! 

508.866.1171 I Texas: 281.740.0355 

Call Toll Free: 888.332.7278 
Visit us at www.decparts.com 



Part Number Description Price 

AM871A HP 8/80 Base 48-ports Enabled SAN Switch $22,450.00 

487741-001 System board Intel G45/ICH1 OR $495.00 

AD385-69001 PCI-X 266MHz 1 Gigabit Ettiernet Fiber Gtiannel (FC) SR adapter $1 ,895.00 

501490-001 80GB SATA tiard disl< drive 1.8" complete $105.00 

446914-001 14.1-inch TFT WXGA LCD display panel - For models with WWAN ....$175.00 

481534-001 6710b FF system board $165.00 

507169-001 DV7-series FF system board $295.00 

485218-001 System board (motherboard) - UMA architecture, GM45 chipset $260.00 

481103-001 12.1-inch TFT WXGA display two WLAN and mic $175.00 

All product tested with three-month warranty. 
Shipping as late as 6:30PM CDT. 




Register at www.decparts.com 
for our giveaway of an 
HP MIN1 1101 



'No purctiase necessary 




bobby@decparts.com I 508.866.1171 
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News 



Study Looks At Current 
Malware Trends 

Antivirus may no longer be enough, accord- 
ing to a recent wliite paper from RSA, ttie 
security division of EMC. Current threats 
classified as Trojans, phishing attacks, and 
botloaders are better than ever at evading 
popular anti-malware utilities. 

Even more disturbing to IT personnel is the 
fact that threats to consumers are increasing- 
ly becoming threats to the enterprise, RSA 
says. As more and more employees mix work 
and personal tasks on their own systems as 
well as company PCs, the malware they 
encounter poses a growing risk for network 
security in the workplace. 

The white paper, "IVIalware and the Enterprise: 



CLIENTS 



Eliminate 

Software 

Downtime 

The Pursuit Of The Always-On Enterprise 



Understanding the Potential Impact of a Trojan 
Infection," discusses the virulent threats that 
disseminate via drive-by downloads, infected 
ads, and social engineering techniques. An 
example of the last is a message payload 
apparently sent from an employee's email 
address. Because the recipient trusts the 
ostensible sender, she becomes more likely to 
activate the malware content. Not only does 
this breach put the user at risk of identity theft 
and fraud, but it also may compromise VPN 
credentials, usernames and passwords, and 
other sensitive corporate data. 

Understand The Risks 

'This report from RSA's FraudAction Research 
Lab not only helps IT managers understand 
the risks associated with a workforce using 
computers for both personal and business pur- 
poses but also the critical need to put the ap- 
propriate security policies and controls in place 
to help mitigate against future threats," says 
Sean Brady, a product marketing manager for 
RSA's Identity Protection and Verification. 

"The rapid evolution of malware has created 
a 'call to arms' of sorts for enterprise security 
managers," Brady says. "Fraudsters have 
long targeted consumers online through the 
theft of personal information and identities, 
yet the new methods and sophistication of 
online criminal tactics are enabling access to 
corporate infrastructures, as well." 

As an example of the extent to which current 
malware is already outpacing security efforts, 
the RSA white paper cited recent research on 
the Zeus banking and information-stealing 
Trojan and Zbot network. The firm tabulated 
a month's worth of data involving domains 
belonging to Fortune 500 companies in late 
2009. Surprisingly, about nine out of 10 (88%) 
of the domains were linked to botnet activity 
based on Zeus version 2 software, RSA report- 
ed. About 60% of those cases involved stolen 
email credentials, according to the report. 
Although very limited in scope, this snapshot 
illustrates that certain types of malware are 
more pervasive in the enterprise than some IT 
departments realize. 




by Chris A. MacKinnon 

No DATA CENTER OR IT manager likes 
downtime because of the havoc it causes 
in the enterprise. As the push for zero 
downtime continues in today's enterprise, 
managers are looking to the software 
applications they're using to see how they 
can knock out the downtime caused by 
those applications. Today's applications 
can't run from the downtime monster, so 
what are managers to do to ensure that 
they're adequately testing applications 
before the big rollout? Can the complexity 
found in today's applications be eliminat- 
ed once and for all? 

Fix Before Failure 

Alex Bewley, CTO at Uptime Software 
(www.uptimesoftware.com), says for 
starters, expecting existing applications to 
be failure-tolerant is not realistic. But the 
good news, Bewley says, is that with 
improvements in the types of platforms 
available for application development (for 
example, Google Apps, VMware Spring- 
Source, and Microsoft Azure), it's possi- 
ble to start developing "failure-aware" 
applications. He comments, "While a tran- 
sition from existing applications to failure- 
aware applications may take five to 10 
years, it is worthwhile for a CIO to start 
developing new business applications on 
these new platforms." 

Bewley says there is also a very early 
trend to better understand how to build 
applications that are failure-tolerant, 
where the expectation is that a component 
of the application will fail at some point. 
A key example of this, he says, is Google. 
"They have thousands of hardware failures 
per day and are aware that this problem 
isn't going to go away," he says. "To 
solve the problem, they have developed 
their applications to be able to deal with 
these kinds of failures." 

Pain Points 

In Bewley's opinion, one of the largest 
pain points for an IT organization deliver- 
ing applications to business users is under- 
standing which applications, or components 
of the applications, are the biggest recurring 



contributors to downtime. He elaborates, 
"There is so much infrastructure overlap- 
ping between applications, and this is even 
further exacerbated with virtualization. 
Even a small component failure can affect 
a large number of applications." He says 
most organizations have no idea of the 
dependencies among the services that 
build up an application. 

Bewley says that outages in underlying 
services can also impact an application in 
many ways. He says this makes deep 
monitoring and management even more 
necessary today than ever, as smart IT 
managers and system administrators need 
to see from the application level, through 
virtualization (if it exists) to the platforms 
and hardware level, and even to the sys- 
tem resources. 

Tim Hodgson, vice president of software 
development at ExclamationSoft (www 
.exclamationsoft.com), says understanding 
what an application does with regard to the 
hardware resources it uses and the software 
it integrates with is key to understanding 
the biggest pain points that software appli- 
cations have to offer. "Failures in these 
two areas are the focal point of software 
failures. For example, if physical memory 
fails, an application may fail when it 
requests more memory resources. Also, if 
an application connects to a database that 
suddenly goes offline, the application may 
fail when it tries to retrieve, add, or update 
its data," Hodgson says. 

Another facet of this challenge, accord- 
ing to Hodgson, is determining who the 
in-house owner of the application is and 
how well they understand it. This is espe- 
cially true, he says, with legacy applica- 
tions that have been installed in the past 
without a clear understanding of what the 
application does and how it can be main- 
tained. "Once the owner is established," 
he says, "monitoring and failure points can 
also be established. When this happens, 
managers can find true meaning in collect- 
ed data and triggered alerts." 

Adequate Steps 

Hodgson says with the ever-increasing 
presence of virtual machine environments, 
the job of testing before a production 



rollout is more convenient than ever. He 
says managers can quickly set up test envi- 
ronments to ensure that applications are 
performing optimally (with the recom- 
mended system resources). He comments, 
"While working closely with in-house 
application developers or software vendors, 
managers should configure test environ- 
ments to mimic — as closely as possible — 
real-world usage scenarios to tax their 
systems as much as possible." Hodgson 
says monitoring system resources can help 
with measuring performance over time to 
spot trends that yield poor performance and 
other weaknesses. 

When it comes to taking proper steps 
toward adequate testing, Bewley says 
most midsized enterprises fall short. He 
says they fail to do adequate scalability 
testing and component failure testing. He 
notes, "It's very important to profile all 
components of an application to under- 
stand system load, transaction throughput, 
and end-user experience. This involves 
profiling all aspects of an application and 



driving load through it until failure." 
Bewley says a controlled development en- 
vironment never matches the vagaries of a 
product deployment. 

Complex Dream 

Eliminating the complexity found in 
many of today's applications is a bit of a 
pipe dream, says Bewley. He says this is 
especially true for "enterprise-sized" appli- 
cations. He explains, "It really depends on 
the application. Most larger-scaled applica- 
tions need a front end, middleware, and a 
database, and if these need to be scaled, the 
complexity scales accordingly. An essen- 
tial part of application health is being able 
to oversee and monitor the application 
across all levels, whether across virtual, 
physical, or cloud environments." 

From there, Bewley says it's essential to 
have the deep drill-down capability to see 
what is going on both inside the applica- 
tion and underneath it. This allows IT 
managers and systems administrators to be 
proactive in finding problems before they 
affect end users. 

Hodgson says the first line of defense 
when eliminating application complexity 
is to engage with the software vendor or 
in-house product manager to determine 
how the application interacts with the 
system. "Reducing complexity for in- 
house applications must start at the 
beginning of the development cycle. 
Organizations that insist on early and fre- 
quent interactions between the developers 
and the implementers can craft a solution 
that strikes a balance between meeting 
the business needs without extensive 
complexity. It is very difficult to scale 
back complexity once the application is 
installed and in use in an organization," 
I he says. O 



The User's Perspective 

For some business users, zero downtime means that servers are always up and applications 
never fail. For these users, zero downtime is not possible because performance is sometimes 
degraded. But according to Brady Reiter, general manager of enterprise architecture and appli- 
cation strategy at NaviSite (www.navisite.com), this does not mean that IT and data center 
managers have to be a punching bag. However, it does mean that managers have to ensure 
the causes for these common problems are mitigated. Reiter comments, "By ensuring systems 
are scalable, conducting ongoing capacity management, and implementing standardized 
change control procedures that hold all parties responsible for thorough system testing, data 
center and IT managers can achieve zero downtime not only in their own eyes, but also in the 
eyes of their business users." 



Key Points 



• With recent improvements in the types of 
platforms available for application devel- 
opment, it's possible to start developing 
"failure-aware" applications. 

• IT organizations must understand which 
applications, or components of the appli- 
cations, are the biggest recurring contribu- 
tors to downtime. 

• Understanding the biggest pain points 
that software applications have to offer 
lies in understanding what an applica- 
tion does with regard to the hardware 
resources it uses and the software it inte- 
grates with. 
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Windows 7 Implementation 



Lessons You Can Learn From Early Adopters 



by Kurt Marko 
■ ■ ■ 

In Internet time, with Web apps seeming- 
ly continuously updated, last fall's release of 
Win? seems eons ago. Although the new OS 
is an undeniable hit with consumers — its 
rate of initial adoption is twice that of much- 
maligned Vista's — enterprises are inherently 
more cautious about jumping on Microsoft's 
bandwagon. A recent survey of IT profes- 
sionals by Dimensional Research found that 
only 16% had already deployed Win?, while 
42% plan to do so this year. That still means 
that about one out of six IT departments 
have deployed Win?, so what might their 
experiences teach those still in the planning 
stage? Experts who have worked with some 
of these early adopters have distilled com- 
mon lessons and advice for their cautious or 
procrastinating colleagues. 

Application Compatibility Is Key 

Despite Microsoft's efforts to maintain 
application compatibility across OS ver- 
sions. Win? is still quite a departure from 
WinXP, and not all legacy apps successful- 
ly make the transition. Info-Tech Research 
Director Mark Tauschek says application 
testing and compatibility is the No. 1 issue 
it hears about from clients who have 
migrated to Win?. 

Tauschek says most commercial, off-the- 
shelf software has been updated or patched 
to work on the new OS — a fact Microsoft 
makes it easy to check via its Windows ? 
Compatibility Center Web site — however, 
homegrown apps can be another story. 
According to Forrester senior analyst 
Benjamin Gray's survey of 
40 enterprise early adopters, 
firms still on WinXP (or 
earlier) can expect that two- 
thirds of their applications 
aren't natively supported on 
Win? — figures could be 
even higher for those mov- 
ing to the 64-bit client, 
particularly because older 
peripherals likely won't 
have 64-bit device drivers. 

Everyone's situation isn't 
that dire, however. Doug 
Miller, a Microsoft practice 
architect for 



CDW (www 



V) 



CO 

u 




03 



I 



.cdw.com), says his firm initially assumed 
application compatibility would be a major 
obstacle to Win? deployments. "We were 
pleasantly surprised to find that application 
compatibility seems to have taken care of 
itself over the last three years. A lot of ven- 
dors have already fixed their software." Not 
surprisingly, old, moribund software 
caused the headaches. "The only times we 
ran into application issues were when we 
were trying to deploy truly legacy applica- 
tions that the customer was well aware 
should have been upgraded," adds Miller. 

The only way to identify problem apps 
prior to a large-scale deployment is via a 
thorough inventory and test regimen. Much 
of the inventory process can be automated, 
and here, too, Microsoft comes to the res- 
cue with another free tool, the Application 
Compatibility Toolkit. However, Tauschek 
cautions that some applications outside of 
it's control will escape such reconnais- 
sance and can only be found by talking to 
the business units about their software use. 

Remedy Incompatibility 

Incompatible apps needn't stymie a Win? 
migration because there are a number of 
technologies that can enable balky apps to 
run on the new desktop. Where updating 
commercial software to newer versions or 
recoding internal applications to the Win? 
APIs isn't possible. Gray suggests using 
software shims or virtualizing the apps to 
run within a WinXP layer. Here there are 
two options: either client-side virtualization, 
using something such as Microsoft's 
Enterprise Desktop Virtualization or server 
hosted via Microsoft Application Virtualiza- 
tion, both available as part of the Desktop 
Optimization Pack. "There are so many 
bridging technologies available, it was very 
easy to overcome [compatibility] issues," 
says Miller. "IE8 notwithstanding, between 
using application virtualization, desktop vir- 
tualization, terminal services, manifest files, 
or creating a custom shim, we were able to 
mitigate 99% of any [application] rework." 

Miller alludes to a less sanguine "ah-ha 
moment" in his work with early adopters. "I 
don't think anyone was quite prepared for 
the impact IE8 would have on the Web 
applications. A lot of organizations have 
moved their enterprise applications to Web- 
based interfaces and IE8 would wreak havoc 
on some of those." He adds that the major 
changes in IE are an aspect of Win? that 
often gets overlooked, "but I learned very 
quickly not to take IE compatibility lightly." 

Upgrade Strategies & Planning 

Microsoft has promoted Win?'s superior- 
ity, and Gray found that early enterprise 
adopters were pleased with its productivity 
benefits, improved security, faster startup 
and shutdown, and stability. Yet experts 



Minimizing 
Deployment Issues 



54% 22% 20% 3% 1% 



Fifty-four percent of organizations 
involved in a recent Info-Tech 
Research survey cited application 
testing as the best way to diminish 
Win7 deployment issues. 

Source: "Windows 7 Planning & Deployment 
Done Right"; Info- Tech Research Slide 
Presentation; April 2010. 



Key Points 



Application compatibility, particularly lega- 
cy commercial software or custom internal 
tools, is the biggest challenge for early 
Win7 adopters. This highlights the impor- 
tance of doing a thorough application 
inventory, rigorous testing, and investiga- 
tion of bridging or remediation technologies 
for incompatible apps. 
Don't overlook changes in IE8, Win7's 
default browser. Enterprises standardizing 
on IE and with custom Web applications 
face another set of compatibility challenges. 
Most firms are tying their Win? rollout to a 
PC hardware refresh, incrementally intro- 
ducing the new OS as old hardware is 
replaced. Firms upgrading existing hard- 
ware will find the process smooth for Vista 
machines and even WinXP systems pur- 
chased in the past three years. 



agree that most enterprises shouldn't under- 
take a wholesale migration of their PC 
fleet. Tauschek recommends introducing 
Win? via a hardware refresh cycle, noting 
that a two- to three-year plan will have com- 
panies off WinXP before extended support 
ends in 2014. In Gray's experience, most 
IT managers are treating the OS upgrade 



and PC refresh projects as one, introducing 
Win? by preinstalling it on new machines. 

Organizations that have already deployed 
Vista and don't relish the prospect of sup- 
porting three client OSes are the one case 
where upgrading existing machines makes 
sense. Despite Win?'s heftier hardware 
requirements, doing a wholesale upgrade of 
existing PCs may not pose as many hard- 
ware challenges as feared. In Miller's expe- 
rience, "Hardware didn't turn out to be a 
problem at all. A lot of organizations had 
already acquired PCs with 2 gigs of RAM 
and we didn't know if that was going to 
work or not, but it turns out 2 gigs is fine; 
even machines with 1 gig did fairly well 
with moderate usage." 

Gray also identified the importance of 
a client management software suite in 
automating the new OS's deployment and 
ongoing management, while a fortuitous 
finding is that training is the least of your 
problems. Gray says the Win? user experi- 
ence hasn't changed dramatically from 
Vista's (or even WinXP' s) and that most 
employees already have experience with 
the new look from home PCs. Tauschek 
adds "people thought [training] was going 
to be a bigger deal than it was," but most 
firms need nothing more sophisticated than 
a brief refresher course or online overview. 

With Win?, industry insiders agree 
Microsoft has overcome the stigma of Vista 
with a solid, enterprise-ready offering. 
Although SPl is due later this year, accord- 
ing to Microsoft, it includes only minor 
updates, many of which will have already 
been delivered through Windows Update, 
and thus not a reason to delay rollout plans, 
according to the experts. 



Cavium Networks Octeon II 
64-BiT MIPS Processors 



NEW PRODUCT 



by Andrew Leibman 



An App Acceleration Ace 



Cavium Networks' latest line of Octeon 
II processors used in routers, switches, 
networked appliances, wireless base sta- 
tions, intelligent server adapters, and 
other networked equipment can help 
widen the bottleneck that the network 
commonly becomes. 

The Octeon II CN68XX and CN6?XX 
processors are perfect for enterprises, 
data centers, and service providers look- 
ing for a high-performance processor that 
keeps energy consumption in check, too. 
The new processors feature between 
eight and 32 enhanced MIPS64 cores, 
more than 85 L3-L? application and 
security acceleration engines, virtualiza- 
tion features, lOOGbps of connectivity, 
and a new Real Time Power Optimizer, 
which is capable of scaling power based 
on application-level processing demands. 

The new cnMIPS64 v2 cores that form 
the basis for the processors each include 
3?KB I-cache and 32KB D-cache that 
run at up to 1.5 GHz for a total of up to 
48GHz in the 32-core Octeon II. The 
redesigned core also offers significantly 
better control plane performance per core 
when compared to Cavium Networks' 
previous model, the Octeon Plus. 
Another notable feature is the support for 
up to 4MB of partitionable L2 cache 
using a HyperConnect cross-bar with 
more than 6Tbps throughput, which gives 
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Cavium Networks Octeon II CN68XX & CN67XX 
Processors 

The latest family of MIPS64 processors is designed 
to handle the demands of borderless enterprises, 
mobile Internet Infrastructures, secure data centers, 
and cloud computing. 

customers lower latency and better per- 
formance that benefits a variety of appli- 
cation workloads. The new processors 
also provide hardware-based data and 
security services application acceleration, 
with more than 40Gbps of packet pro- 
cessing and TCP performance, more than 
40Gbps IPsec, SSL security perform- 
ance, WAPI support in encryption/ 
decryption engines, Snow3G hardware 
acceleration, and up to 20Gbps compres- 
sion/decompression acceleration. 

New customers also appreciate Cavium 
Networks' PACE (Partnership to Accel- 
erate Customer End-Solutions) program, 
which consists of more than 50 partners 
backing the new offerings with operating 
systems and tools, software applications 
and stacks, debuggers, complementary sil- 
icon, and other products and services. The 
Octeon II CN68XX and CN6?XX proces- 
sors will be available in Q4 2010. 



(650) 623-7000 
www.caviumnetworks.com 
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Equipment Disposal Services 



Company 



Description 



Anything!! 



With a suite of IT asset management services, including 
testing, auditing, and processing, AnythingIT can help 
you deal with your aging technology. AnythinglT's con- 
sultants will perform an IT asset review and analysis that 
uses a fair market evaluation of your current technology. 

• Recycle Tomorrow program saves costs in the remar- 
keting and recycling process 

• Can process IT assets in three ISO 9001 -certified 
facilities 

• Offers custom-designed channel and non-channel 
programs for OEMs and integrators 

• Knowledgeable in disposition processing, data mining, 
and warehouse systems for IT assets 

Best For: Companies that need help to make cost- 
effective business decisions for IT storage, disposal, 
resale, donations, and recycling. 



Apto Solutions 



Ap^so I u 1 1 n s 



Apto Solutions can help you monetize downsized or liq- 
uidated assets, and the company can handle the sales 
process, such as market research, valuation, collections, 
and shipment, for you. 

• Features compliance programs for environmental, 
export, data security, and electronic tracking issues 

• Logistics management for recovery and consolidation 
to the Apto warehouse 

• Inventory Management System lets you track the 
trade process 

• Maximize return on investment through an extensive 
contact network and market knowledge 

Best For: Companies looking for a recovery service with 
experience, credentials, and expertise in technology 
remarketing. 



Classic Computer Recovery 







^nter Recovery, 


Inc. 



Classic Computer Recovery can refurbish, reuse, and 
recycle all types of electronics, including PCs, copiers, 
and televisions, because of the company's zero-waste 
policy. The inventory is evaluated through a multitest 
process for serviceability, and the company's associa- 
tions with wholesale and retail markets allow Classic 
Computer Recovery to resell the parts of units that can't 
be sold as a whole unit. 

• Equipment is refurbished with working components 

• For equipment that can't be resold, the unit is broken 
down into separate components 

• Hardware that's too old for resale is recycled for raw 
materials 

• Removes data using the DoD's 5200.28-STD 
directive 

Best For: Enterprises that have a variety of electronics 
to remove and recycle. 



Contact 



(877) 766-3050 
www.anythingit.com 



(877) 961-9630 
www.aptosolutions.com 



(734) 293-5857 or (517) 327-5350 
www.classiccomputerrecovery.com 



Company 



Frontier Computer 



Description 



redefine IT. 



FfiCNTIERHel 



Frontier Computer has been in the business of helping 
companies plan, build, and maintain their IT infrastruc- 
tures since 1976. The company buys used computer 
equipment, excess IT hardware, and enterprise-level IT 
equipment, including servers, workstations, peripherals, 
storage arrays, and networking tools. 

• Buys excess new or used enterprise equipment 

• Offers environmentally friendly end-of-life sen/ices for 
obsolete IT assets 

• Works with Cisco, HP, IBM, and Sun hardware 

• Global presence helps Frontier respond with speed to 
customer demands 

Best For: Enterprises that want to sell their equipment to 
a company with decades of experience with IT hardware. 



Horizon Datacom 



r\ HORIZON 
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yoyr network, oyr missfon 



Horizon Datacom purchases network LAN/WAN, 
wireless, and VoIP equipment from a variety of man- 
ufacturers, including Cisco, Juniper, Nortel, Polycom, 
and 3Com. 

• Tests and refurbishes used equipment 

• Offers a complete buyback program to protect your 
hardware investment 

• Real-time inventory with everything shown in stock 

• Rated A+ by Better Business Bureau 

Best For: Companies getting rid of surplus networking 
and communications equipment. 



Nextend 



nextend 



Assets Secured. Value Assured." 



Nextend helps you understand your inventory to create a 
complete asset decommission plan that eliminates the 
risk and liability associated with electronic assets and 
increases revenue from aftermarket sources. 

• Used IT assets are managed by an in-house team to 
get biggest return on investment 

• Helps you determine if hardware is best recouped for 
revenue, left in its current location, or responsibly 
recycled 

• RecyclePLUS program provides itemized reporting, 
serial number, and certification of data security 
measures 

• Offers several methods of secure transport 

Best For: Companies that want an equipment disposal 
service that strives for the best aftermarket value. 



Contact 



(231)929-1386 

www.frontiercomputercorp.com 



(800) 227-2362 
www.horizondatacom.com 



(866) 996-6398 
I www.nextendllc.com 
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Processots Product Spotlight highlights options available in key data center product categories, providing product information side-by-side for easy comparison. 

Compiled by Nathan Lake 



Converge 



c 



CONVERGE 



Converge focuses on data security and protecting clients 
from liability by leveraging technology, processes, and cus- 
tomized solutions into the right mix of end-of-life IT asset 
management and disposition services. And with Converge's 
30 years of technology remarketing experience, customers 
can mitigate or eliminate the costs associated with compliant 
IT asset disposition. 

• Ultimate data security protection 

• Environmentally compliant disposal 

• Comprehensive remarketing, redeployment, and donation 
strategies 

• Real-time, comprehensive reporting 

Best For: Enterprise or global organizations needing a 
secure, compliant global IT asset disposition strategy. 



Data Media Source 




Data Media Sdurce 

www.datamediasource.com 



Data IVIedia Source buys used tape media, including LTO, AIT, 
and SDLT, and provides free data destruction, taking care of all 
the logistic and security concerns you have. Sold media can be 
turned into cash or exchanged for brand-new media. 

• Provides value of the tape and details costs involved 

• Tape is shipped with complete chain-of-custody 
documentation 

• Tape is inspected and sorted — you'll be notified of 
completion 

• Once inspection is complete, paperwork is processed 
for payment 

Best For: Companies in the process of removing or renewing 
their tape libraries. 



DMD Systems Recovery 




DMD Systems Recovery works hard to minimize your risk and 
maximize your payback, so you'll get a solid return on invest- 
ment without worrying about the possibilities of regulatory fines, 
bad publicity, or litigation from data theft on hard drives that 
weren't properly sanitized. DIVID Systems Recovery offers data 
deinstallation, packaging, logistics, data destruction, recycling, 
and remarketing. 

• Removal and packaging services to presen/e value 

• Increased ROI through direct purchase or profit sharing 

• DoD 5220.22-l\/l-compliant data wipe and NAID-compliant 
destruction 

• Reduced risk through certificates of destruction and compli- 
ance and transfer of ownership 

Best For: Data centers, call centers, and companies with large 
centralized operations. 



(800) 961-9270 
www.converge.com 



(800) 252-9268 
www.datamediasource.com 



(877) 777-0651 
www.dmdsystems.com 



Reclamere 




CLA 

The Data Security Experts 



Reclamere's experienced team works with you to develop a 
data security plan tailored to meet your data destruction, 
data recovery, and IT asset management needs. Recla- 
mere's experts can also help you execute your legal respon- 
sibilities for each phase of the IT equipment lifecycle, which 
helps protect the company, employees, and clients from 
data breaches. 

• Certified data destruction 

• IT asset management for safe and secure preparation of 
electronic equipment 

• IT audit and assessment to evaluate a company's risk level 

• E-discovery and litigation support to recover information 
from hard drives for legal procedures 

Best For: Enterprises most concerned about the security of 
outdated IT assets. 



Recycle Your Media 



tecvcleYourMedia 



Recycle Your Media has a proprietary system for fully erasing, 
reconditioning, and certifying used LTO tape cartridges to data- 
free, ready-to-reuse condition. The process fully erases each 
tape from pin to hub with a magnetic degauss power that's 10 
times stronger than DoD degaussing standards. The entire tape 
surface is cleaned, and the media pack is exercised, reten- 
sioned, and evaluated for quality. 

• 1 00% full-length, pin-to-hub erasure for total security 

• High-power erase at 10 times drive read/write head strength 
eliminates all signal 

• Drive read/write data test and reset to blank tape, ready-to- 
write status 

• Final quality assurance scan step to confirm full erasure, 
reset, and data integrity 

Best For: IT staff who want a green alternative for recycling 
tape media that's out of its retention period, tapes that no 
longer need to be archived, or tapes that may normally be 
shredded or incinerated. 



Redemtech 



REDEMTECH. 



Redemtech specializes in helping Global 1000 IT organiza- 
tions reduce the cost and risk of technology change. Our 
ITAD (IT Asset Disposition) services recover, refurbish, rede- 
ploy, resell, and recycle IT assets of every kind with security 
and transparency. 

• Red Rabbitt brand of Microsoft Authorized Refurbished 
equipment increases value recovery 

• High-security reverse logistics virtually eliminates data and 
asset security risk in-transit 

• Global e-Stewards certification ensures responsible manage- 
ment of e-waste 

• Integrated operations across the United States, Canada, 
Mexico, and Europe ensure uniform services delivery and 
centralized asset management 

Best For: Enterprises engaged in highly distributed asset 
recovery and reuse programs, large and small disposition 
projects, and high-value portfolios. 



(814) 684-5505 
www.reclamere.com 



(949) 757-0100 

www. recycleyou rmedia.com 



(800) 743-3499 
www. redemtech .com 
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Training 



Global Knowledge 




Global Knowledge , 



Global Knowledge is the worldwide leader in IT and business skills training. The 
company delivers courses via training centers, private facilities, and the Internet, 
letting customers choose when, where, and how they want to receive training programs 
and learning services. Global Knowledge specializes in high-quality, hands-on data 
center training courses that are delivered by accomplished cross-domain experts. 
Instructors are certified Cisco Systems and VMware-Certified instructors with real-world 
experience. The company's broad-based data center curriculum includes VMware, 
Cisco, Sun, IBM, Red Hat, and IVIicrosoft courses, as well as other subjects. 

• Learn from experienced instructors and award-winning curriculum 

• Engage with custom, hands-on labs and exercises 

• Choose from robust delivery options 

• Train a local group or a dispersed workforce 

• Select from more than 1 ,200 courses 

Best For: IT training for the individual or for the enterprise organization that requires 
skills development or certification. 



(800) 268-7737 
www.globalknowledge.com 



TechSkllls 
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NetCom Information 
Technology 



riETCom 

INFORMATION 



TECHNOLOGY 



NetCom Information Technology, headquartered in New York, was recognized by 
IVIicrosoft as its 2007 Worldwide Learning Solutions Partner of the Year. NetCom has 
training centers located in 18 states across the country and offers training solutions for 
more than 1 ,000 technical, application, and project management courses to Fortune 500 
companies, businesses, government agencies, and individuals. NetCom's subject 
matter experts provide authorized hands-on education in the latest technologies from 
leading vendors, including (ISC)2, Adobe, Autodesk, Check Point, Cisco, Citrix, CIW, 
CompTIA, EC-Council, IVIicrosoft, Novell, Oracle, PIVII, and others. NetCom is an autho- 
rized testing center for Sylvan Prometric, VUE, and Certiport. The company is also a 
New York and New Jersey Workforce Training Provider and a licensed school regis- 
tered with the New York State Education Department. 

• Provides world-class training and certification preparation for the most in-demand 
computer technologies 

• Offers authorized career training classes in Microsoft, Cisco, Adobe, PMI, Autodesk, 
Oracle, Novell, CompTIA, and more 

• All courses and boot camps are hands-on, led by certified instructors using the 
latest equipment 

• On average, NetCom instructors have 1 1 or more years of experience in the subjects 
they teach 

• Curriculum options aimed at helping students become Web site developers, database 
administrators, computer programmers, graphic designers, security specialists, and 
project managers 

• In the last decade, NetCom has delivered training to thousands of individuals 
and corporations 

Best For: IT, security, and project management training for beginners and also for 
experienced staff looking to enhance their careers or enter a new market. 



(888) 563-8266 
www.netcominfo.com 



United Training 



United 

Trainini 



TechSkllls is a nationally recognized leader in education delivery, specializing in skills 
and certification training for careers in information technology, healthcare services, and 
business. TechSkllls' teaching methodology combines elements of traditional instructor- 
led education, the latest online learning tools, and extensive hands-on skill-building to 
create an effective and efficient learning process. Students control what they learn, 
when they learn, how they learn, and how rapidly they progress. Based in Austin, Texas, 
TechSkllls operates more than 25 campuses in 16 states. TechSkllls campuses are 
licensed in each state in which they operate, and select TechSkills campuses are 
nationally accredited by the Accrediting Council for Continuing Education & Training. 

• Offers personalized programs that include morning, afternoon, evening, and weekend 
classes; online and on-campus study options; intensive, small group "microlab" 
training sessions; and the latest online learning tools 

• Course customization lets you skip what you already know and progress at your 
optimal speed 

• Hundreds of hands-on lab activities to provide real-world experience 

• Online access 24/7 lets you work through on-the-job scenarios in real time 

• More than 90% of TechSkllls' students pass their industry certification tests on their 
first attempt; if you don't pass your certification test the first time, TechSkills will pay 
for one retake for every successfully completed course 

• Job placement assistance that includes personal coaching, help with resumes, and 
career development workshops 

• Multiple programs, including Microsoft, Cisco, Oracle, and IT security certification 

Best For: Students seeking certification in IT, technical, or business areas. 



Actually a consortium of independently owned training centers. United Training 
concentrates on helping its members provide high-quality IT training from regional 
providers. Since 2000, the company has been delivering training nationally and 
developing strategic relationships with manufacturers and vendors of IT-related 
products and services. The company's goal is to provide quality training throughout 
North America on any IT training product, anywhere, and at any time. United Training 
offers in-class, private, and mobile classroom training options, and many members 
offer Web-based virtual classrooms. United Training regularly offers free Webcasts. In 
addition to the typical communication channels, members and students can comment 
on and communicate with the company via Twitter and Facebook. 

• Microsoft Gold Certified Partner 

• Courses offered in most states and in Canada 

• Hundreds of courses offered in more than 50 technology areas, including Web 
development, programming, CRM, SOL Server, and Exchange 

• Many courses offered for Cisco, MCSA/MCSE, and other certifications 

Best For: IT staff seeking basic or advanced certification in multiple areas, as well as 
employees needing introductory coursework in popular business applications. 



(800) 639-7545 
www.techskills.com 



(603) 952-4712 
www.unitedtraining.com 
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New Horizons Computer Learning Centers 



New Horizons ' 

Computer Learning Centers 

With more than 320 locations in 70 countries, New Horizons is the world's largest 
independent IT training company. For the past 28 years, the company has delivered a 
full range of IT training and certification and business skills education. The company 
has helped more than 25 million students and offers courses in hundreds of locations 
around the world. 

• 320 New Horizons locations worldwide, specializing in Microsoft and Cisco 
products and technology 

• Cisco's North American Learning Partner of the Year for 2009-1 

• Microsoft's largest worldwide training partner 

• Flexible training: mentored learning, instructor-led, classroom and online, 
self-paced e-learning 

• The only provider with Mentored Learning capability that gives you all the benefits 
of an instructor while learning at your own pace 

• More than 50 authorized Cisco locations in the United States 

• Local centers, instructors, and customer sen/ice teams that tailor learning paths 
specifically to your business/career goals 

Best For: New and experienced IT staff, including experienced Microsoft technical staff 
looking to cross over into Cisco routing, switching, and voice products, as well as those 
seeking additional ways to increase their marketability. Also ideal for help desk profes- 
sionals looking to improve their skills and enhance their career options. 



(714) 940-8000 
www.newhorizons.com 



Unitek 



UNITEK 

EDUCATION 



Unitek's IT training division offers hundreds of courses in dozens of categories, many of 
them available as all-day, daytime, or evening courses. The division specializes in IT 
training, with Microsoft, Cisco, CompTIA, Red Hat, Sun, and other security certifications 
offered. Some courses are offered over the Web. If you're in a hurry, Unitek's special 
accelerated "boot camps" are aimed at teaching specific skills, tools, or technologies 
over a limited time span in a zero-distraction environment. 

• Courses offered in 13 cities in six states, plus online 

• If your company has four or more people taking the same course, you can "anchor" 
the course, thus guaranteeing that it will run 

• Onsite training available 

• Courses offered for both end users and corporate administrators 

• Unitek is a NetApp Authorized Learning Partner and an authorized Prometric testing 
center, operating multiple exam sites in Fremont and Santa Clara, Calif. 

Best For: IT staff seeking basic or advanced certification in any of several areas: 
Microsoft, Cisco, Citrix, Linux, and others. 



(888) 825-6273 
www.unitek.com/training 
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IW-R100 

Cost- Effective 1U Entry-Level Server Chassis 

• 26"x19"x1.75"(DxWxH) • Changeable Fans Modules 

• Support Extended ATX (12" x1 3") • Outstanding Ttiermal Solution 

• External 5.25" x 1 & Internal 3.5" x 2 




IW-R200 

Open-Bay 2U Server Chassis 

• 23.5"x19"x3.5"(DxWxH) 

• Support CEB (12"x1 0.5") 

• Slim ODD, Slim FDD, External 5.25" x 2, 
Internal 3.5" x 3 

• Utilized 2 X 5.25" bays supported storage kit 



IW-RA100 

1 U Compact Server Chassis 

• 15°x19"x1.75" (DxWxH) 

• Support ATX (12" X 9.6") 

• Slim ODD & Internal 3.5" x 2 

• Powerful 1 U appliance witti 1 5"depth 
for space-sensitive 





IW-R300 

Compact Stylish 3U Server Chassis 

• 19"x19"x5.25"(DxWxH) 

• Support CEB (12" X 10.5") 

• Slim ODD, External 5.25" x 2, 3.5" x 1 , 
Internal 3.5" x 5 

• Single or Redundant PSU options 



IW-R400 

Economical Industrial 4U Server 
Chassis 

• 20"x19"x7"(DxWxH) 

• Support CEB (12" X 10.5") 

• External 5.25" x 3, 3.5" x 2 & Internal 3.5" x 3 

• Anti-shock vibration 



SYNNFX servers ► DIRECT- MA* LABS 



VrecftOstal LEADER 



TECH 



In Win Development (U.S.A.) Inc. 

188 Brea Canyon Road, 
City of Industry, CA91789 
Tel: 1-909-348-0588 
URL: w/ww.in-win.us 



Instantly Search 
Terabytes of Text 





il Instantly Seaixh 
Terabytes of Text 




includes 

64-bit 



♦ Built-in file parsers and 
converters highlight hits 
in popular file types 

♦ 25+ full-text and fielded 
data search options 

♦ Spider supports static and 
dynamic web data; 
highlights hits with links , 
formatting and images[ 
intact 

♦ API supports .NET, C++, SQL, 
Java, etc. .NET Spider API 

Content extraction only 
licenses also available 



'Bottom line: dtSearch manages a terabyte of text in a single 
index and returns results in less than a second" — InfoWorld 

dtSearch "covers all data sources ... powerful Web-based 
engines" — el/l/ff/C 

'Lightning fast ... performance was unmatched by any other 
product" — Redmond Magazine 

For hundreds more reviews, and hundreds of developer 
case studies, see www.dtSearch.com 



Fully-Functional Evaluation! 
1-800-IT-FINDS • www.dtSearch.com 

The Smart Choice for Text Retrieval® since 1991 
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CENTER MANAGEMENT 



Are Your Apps A Good 
Fit For The Cloud? 

I/O-Heavy Applications & High-Availability Systems May Not Run Well 



by Sue Hildreth 

Cloud computing is promising to 
change the way enterprises look at their 
IT systems, enabling them to get large 
amounts of computing power and storage 
capacity on demand without making long- 
term investments in hardware. 

But as with many new technologies, not 
everything about the cloud is ideal for all 
IT environments. Many components in the 
cloud infrastructure are still being devel- 
oped and are not quite ready to handle all 
enterprise applications. 

"I would recommend against jumping in 
with both feet when it comes to moving all 
servers and back-end systems aggressively 
to the cloud," says David Sengupta, a Ferris 
Research analyst. "Internet bandwidth and 
the cost of bandwidth are the biggest bottle- 
necks currently. Manageability is another 
area that has barely gotten off the ground." 

Cloud vendors are working to improve 
their offerings and make them more suitable 
to high-availability applications as well as 
just high-I/O or data-heavy applications. 



But it will take some time before the cloud 
is well-suited to every type of IT system. 

No Cloud Alike 

Cloud computing usually refers to either 
the platform-as-a-service or the infrastruc- 
ture-as-a-service models. With a platform 
as a service, customers use the cloud as a 
giant server, uploading their applications 
and gaining access to items such as data- 
bases, reporting tools, and security. Infra- 
structure as a service gives the customer 
on-demand access to raw computing 
resources such as CPUs and storage. 

In addition to offering different services, 
cloud vendors also take different approach- 
es to configuring their cloud networks. And 
not all apps are architected to take full 
advantage of grid computing. "Each of the 
vendors has taken to optimization in differ- 
ent ways," says Narinder Singh, CMO for 
Appirio (www.appirio.com). 

Generally, the problems fall into one of 
two categories: complexities involved with 
virtualization and grid computing itself and 
the issues associated with outsourcing. 



Key Points 



• IT administrators have less control and 
ability to troubleshoot an outsourced 
cloud environment. 

• The I/O interface on a physical server can 
become a bottleneck if loaded with many 
virtual servers. 

• Cloud infrastructure is ideal for applica- 
tions that need to scale up quickly or need 
huge amounts of computing power for a 
short time. 



Still A Work In Progress 

IT administrators have less control and 
ability to troubleshoot an outsourced cloud 
environment because cloud providers have 
not focused on creating applications or 
APIs to enable customers to monitor and 
manage their services, says Sengupta. 

"Hosting companies have been focused 
on building secure, highly available black 
boxes, and their only interest in manage- 
ability has been for their own purposes. . . . 
They haven't yet invested in exposing Web 
services or APIs for customers to get that 
'single-pane-of-glass' view into their own 
service deliver metrics, availability, etc.," 
Sengupta says. "As things mature, I expect 
a consistent set of manageability standards 
to emerge to enable this sort of thing." 

Another problem is that you can't specify 
the hardware they want for their applica- 
tions. Cloud capacity and CPU time is 
purchased in units. These units may use dif- 
ferent servers and CPUs. "Some servers 
may wind up working very hard and others 
are underworked," notes Dan Bartow, cloud 
test engineer for Soasta (www.soasta.com). 

Load balancing is a related problem. The 
software load balancers used in cloud net- 
works have generally not been as robust or 
as sophisticated as hardware load balancers, 
says Bartow. An inadequate load balancer, 
faced with the diversity of CPUs in the grid, 
leaves some servers running overloaded. 

The I/O interface on a typical physical 
server can be another bottleneck, experts 
say. "In a highly virtualized server, there is 



still but one standard I/O interface card for 
the single physical server," says Jarrod 
Siket, a Metronome senior vice president 
(www.netronome.com). "That was OK 
before, but now that single standard NIC is 
connected to multiple virtual servers. If one 
of those virtual servers hogs that network 
pipe, then the others are offline." 

Temporary Bursts Of Compute Power 

Experts agree that a cloud infrastructure 
is ideal for applications that need to scale 
quickly, such as a customer-facing Web 
application during a promotion, or that 
need huge amounts of computing power 
for a short time, such as scientific analysis. 

But the cloud may not be great for appli- 
cations that demand a fast and consistent 
response time. Applications that require 
heavy data flows back and forth, such as 
analysis programs crunching large volumes 
of data, aren't ideal either, says Informati- 
ca's Vice President of R&D Ravi Akella 
(www.informatica.com). Akella says trans- 
ferring the initial load of data into the cloud 
can take a long time. "For us, it's a one-time 
move, but it would become a problem to 
I move as much as a terabyte of data to the 
cloud on a regular basis," Akella says. 

Soasta' s Bartow notes that the easiest 
applications to move to the cloud "are 
ones that are relatively stateless, that do 
things like processing calculations or con- 
tent delivery," while the most difficult 
applications to move are ones with data- 
intensive or personally identifiable infor- 
mation, including back-office systems 
such as email, HR, and benefits systems. 

Netronome's Siket agrees. "Almost any 
app that sits in a data center could be out- 
sourced, including CRM apps, conferenc- 
ing, collaboration, Web email, and content 
creation. . . . On the other extreme, the ones 
you'd want to avoid are things with highest 
rccil-time nature, because sending data over 
the public Internet is so subject to delay." 

Looking at past performance metrics 
and current SLA guarantees can provide 
insight into potential performance issues, 
experts say. 

"We've seen an explosion of companies 
that have cloud-enabled services, and the 
natural question then becomes, 'How do I 
know they've got enough capacity?,'" says 
Appirio' s Singh, who is optimistic that 
cloud providers will solve most perfor- 
mance problems in the near future. "We've 
seen the technical barriers for running an 
enterprise application on top of cloud infra- 
structure come way down. I think that, just 
like the utility companies in the past, many 
of these cloud vendors are investing so 
much in infrastructure that it goes without 
saying they will be able to scale." 



Cloud Computing Options 

Public clouds. A public cloud refers to any commercial cloud service provider that offers its 
shared, cloud-based services over the Internet to any paying customer. These enable organiza- 
tions to purchase shared computing power and storage; platform services such as databases, 
development tools, or user-provisioning applications; and access to specific end-user applications 
such as CRIVI, content management, and collaborative software. 

Private clouds. Private clouds are utility computing infrastructures that are created inside of an 
organization for its own use or maintained by and located at a third-party cloud provider for the 
customer. Private clouds maximize a customer's IT resources by pooling them via grid computing 
and virtualization technologies but require the customer to pay for its dedicated hardware and the 
ongoing costs of maintaining it. Companies concerned about security or bandwidth issues may 
opt for a private cloud approach. 

Community clouds. A community cloud is an infrastructure that is created and shared by a com- 
munity of businesses or government agencies. The idea is to provide better control over privacy, 
security, and performance for a smaller group of like-minded subscribers. 

Hybrid clouds. These are a mix of private and public or community cloud infrastructures. They are 
often used by organizations that want to maintain control over their cloud-based applications and 
hardware but need to have access to extra computing power and capacity on a short-term basis. 

Sources: "The NIST Working Definition of Cloud Computing," by Peter Mell and Tim Grange. National Institute of Standards and 
Technology, Information Technology Laboratory; Wikipedia Cloud Computing entry 
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Information 
Technology 
Trading 



Experience to find you the 
right technology solution. 

AS/400 • RS/6000 • Sun Microsystems 
Storage • Tape Backup 



(877)715-3686 | www.itechtrading.com 




Pegasus Buys, Sells and Offers Depot 
Maintenance on Kronos Timeclocks 



Ethernet Daughter Board, Modem Option, Remote 
Readers, Bell Relays, Master Sync, Battery Backup Kit, 
Dual Reader, /O board. External Reader I/O Board 



We can supply any 
configuration you need, 
if you liave cioci(s 
instailed and need 
a specific KOS version 
we can iieip you. 
Same is true on i/0 Boards. 



PCM 



Pegasus Computer Marketing, Inc. 

(800) 856-2111 I www.pegasuscomputer.net 




Memory for PCs & Macs 

WE BUY 

^ MEMORY! 

i 



Immediate Need Fo 

1,2, and 4GB modules 
SUN Memory and P4 Processors 
We also buy XEON processors 

CALL TODAY! 



WE BUY ANY 8 

Call Jeff 
(239) 596-2254 



IMIEIMOIi¥ 



The low price leader for quality memory modules since 1987 

(239) 596-2254 • Fax (239) 596-2256 
jeffsmsmemory@gmail.com • www.smsassembly.com 



May 21, 2010 



SAVE 300! 

when you register with 
priority code STRIP. 



r 



Processor.com 



Page 45 





Consolidation 

IT Operations 



Virtualization 

Private Cloud 'til and cmdb 



Getting Maximum Value From Cloud, Virtualization 
and Other Game-Changers 

Discover how to: 

• Determine your next steps with cloud computing and virtualization. 

• Respond to changing business requirements. 

• Manage and leverage your virtualization investments. 

• Assess emerging technologies and their impact. 

• Show how l&O supports, addresses and solves mission-critical business goals. 
Visit gartner.com/us/iom or call 1 866 405 251 1 nowl 

PROCESSOR Processor is a proud media partner of 

Gartner IT Infrastructure, Operations & Management Summit 



© 2010 Gartner. Inc. and/or its affiliates, Pil rights roscr/od. Gartner is a rcgistcrcxJ trademark of 
Gartner, Inc. or its affiliates. For rrmte informatlfin, a-mail lnfo^?gartnef.ccm orvtait gartnGr.com. 



Gartriei^ 

IT Infrastructure, 
Operations & 
Management 
Summit 2010 

June 14-16 
Orlando, FL 
gartner.com/us/iom 
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Thanks to DMD, we 
don't have to sit on 
our old computer 
equipment anymore. 



retrieve ■ refurbish - reuse ■ recycle ■ remarket 
We Purchase: We Offer: 



Computers/Laptops 
Networking Equipment 
Power/Environmental 
Telecommunications 
Complete Data Centers 
Printers 



Asset Tracking/Reporting 
Deinstallation/Packing/Transportation 
DOD Level Data Destruction 
Epa Recycling/Reuse 
Ongoing Support Plans 
Technology Refresti/lnstall Programs 



At DMD Systems Recovery, we remove the headache from asset 
disposal. We can manage the whole process from deinstallation to 
asset remarketing. We worry about data destruction, EPA 
regulations, logistics, and insurance so that you don't have too. 
Don't tie up your resources or take chances with you data or 
environmental issues. Call DMD today. 



f 



DMD SYSTEMS RECOVERY, iNC, 

Providing QUALITY QDODS and SERVICES lor Itidjaliv. 

M*mMi' slArtOM-Om* BiJSfl4mBiir**ui.0'Mribe'o'dWTi'MiT# HP Au;naniM. 



Processor 
Solutions Directory 

Here are brief snapsliots of several companies 
offering products designed for the data center and 
IT industry. Listings are sorted by category, 
making it easy for you to find and compare companies 
offering the products and services you need. 

You can find more detailed information on these 
companies and the products they offer inside this issue. 



^ MAGNEOT 



Magnext Ltd 

7099 Huntley Rd, Suite 104 1 
Columbus, OH 43229 DATA BACKUP SOLUTIONS 



New &. REFURBISHED TAPE S. HARD-DISK BASED BACKUP SOtUTIOIMS 

Library upgrade packages for higher performance & capacity 
Tape library repair specialists - stock lOOO's of parts 

SPECIAL 

PRICE 

• SUN SL24 Autoloader, 24-slots (SL24-1L3H-SCSI-Z) $5,100 
IxLTOS LVD SCSI Tape Drive (NEW, 1 yr. warranty) 

• SUN SL24 Autoloader, 24-slots $5,850 
2xLT03 HH LVD SCSI Tape Drives (NEW, 1 yr warranty) 

• SUN SL24 Autoloader, 24-slots (SL24-1L4-FC-Z) $6,225 
lxLT04 4G FC Tape Drive (new, l yr. warranty) 

• SUN SL48 Tape Library, 48-slots (SL48-1L3H-SCSI-Z) $7,875 
IxLTOS LVD SCSI Tape Drive (NEW, 1 yr. warranty) 

• SUN SL48 Tape Library, 48-slots $9,600 
2xLT03 HH LVD SCSI Tape Drives (NEW, 1 yr warranty) 

• SUN SL48 Tape Library, 48-slots (SL48-1L4-FC-Z) $9,000 
lxLT04 4G FC Tape Drive (NEW, 1 yr. warranty) 

— INQUIRE FOR OTHER MODELS — 
Committed to providing high-value, high-quality, products to the IT marketplace 



Toll-free 888-NOW-TAPE 
www.nnagnext.com 



614-433-0011 
info@innagnext.com 



Physical Infrastructure 



ADDER 



Adder, the experts in connectivity solutions, has special- 
ized in global and local computer connectivity since 1984. 
As a leading developer and manufacturer of KVM switch- 
es, video and audio extenders, KVM-over-IP devices, and 
remote management solutions, Adder gives IT profession- 
als the tools they need to manage networks and enable 
distributed remote control anywhere in the world. 

Products Sold: 

• KVM and KVM-over-IP switches and extenders 

• Management software 

• Cables and accessories 

• Rackmount kits 



932-3337 I www.adder.com 



dbg 



DEC-Compaq-Cisco-Sun-SGI 



770-931-7732 

Fax 770-931-9416 

www.dbgweb.com 
salesp@clbgweb.com 



AlphaServer GS160 Model 16 

Base System for OpenVMS 

• DY-160CG-AA 

• One Alptia 21264 Processor 1224 MHz 

• Four Quad Building Bloclcs 

• One 14-Slot PCI Slielf 

• OpenVMS Operating System License 

ALSO AVAILABLE: 

• Additional 1224 MHz CPU w/SMP 

• Additional Memory 

• Additional PCI Shelves 

• Additional PCI Options 



2 Systems In Stock! 



Authorized COMPAQ' Reseller 

WE WILL BUY YOUR USED HARDWARE! 




Physical Infrastructure 



S^AVTECH 



AVTECH Software, founded in 1988, is focused on making 
the monitoring and management of systems, servers, net- 
works, and data center environments easier. AVTECH pro- 
vides powerful, easy-to-use software and hardware that 
saves organizations time and money while improving opera- 
tional efficiency and preparedness. AVTECH products use 
advanced alerting technologies to communicate critical status 
information and can perform automatic corrective actions. 

Products Sold: 

A full range of products that monitor the IT and facilities 
environment, including temperature, humidity, power, 
flood, room entry, and UPS 



220-6700 I www.AVTECH.com 



To list your company and products, 
call (800) 247-4880. 
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Physical Infrastructure 



Baylech was founded in 1976 and, since tlie 1990s, has 
developed unique products for remote power management. 
The company uses printed circuit board instead of wires for a 
better, more resilient connection between the data center 
equipment and the receptacle. BayTech provides an exten- 
sive Web site with brochure downloads, warranty informa- 
tion, and reseller support and also offers evaluation units for 
data centers. 

Products Sold: 

• Power control, distribution, management, and metering 

• Power transfer switches 

• Console management and remote site management 



(800) 523-2702 I www.baytech.net 



Physical Infrastructure 



MOVINCOOL 

the #1 SPOT COOLING SOLUTION 



The MovinCool division of DENSO Sales California has 
pioneered the use of portable air conditioning solutions for 
a variety of North and South American markets since 1982. 
IVIovinCool works with a national network of distributors and 
suppliers to provide product sales, installation, and rental. 

Products Sold: 

• Office Pro Portable Air Conditioner Series for indoor 
environments such as sen/er and telecom rooms 

• Classic & Classic Plus Portable Air Conditioner Series 
for moisture removal, outdoor and industrial spot-cooling 

• CIVI Series ceiling-mounted A/C for cooling server 
rooms, telecom closets, or anywhere space is limited 



(800)264-9573 I www.movincool.com 




Physical Infrastructure 



Server Technolosy 

Solutions for the Data Center Equipment Cabinet 



Server Technology is committed to the PDU market with the 
largest group of engineers dedicated to power distribution 
and other solutions within the equipment cabinet. Advance- 
ments in device power monitoring help data centers monitor 
and improve their efficiency, and continuous research and 
development is fueled by companies that look to Server 
Technology for their custom cabinet power solutions. 

Products Sold: 

A complete line of cabinet PDUs, including Per Outlet 
Power Sensing (POPS), Rack Mount Fail-Safe Transfer 
Switch, Console Port access with remote power manage- 
ment. Switched, Smart, Metered, Basic, and -48 VDC 



(800)835-1515 I www.servertech.com 



Networking & VPN 



GoToAssist 

EXPRESS 

GoToAssist® Express"^"" lets you easily view and control 
your customer's computer online, so you quickly resolve 
their technical issues. You'll amaze customers by solving 
problems on the spot while reducing travel time and 
lowering supports costs. GoToAssist Express is brought to 
you by Citrix Online, a fast-growing division of Citrix 
Systems. Every month, more than 15,000 new customers 
start using Citrix Online's sen/ices to work from anywhere 
with anyone — using remote-connectivity tools to save time, 
get more done, and connect to others around the world. 

Products Sold: 

GoToMyPC, GoToMeeting, GoToAssist, and GoToWebinar. 



(800) 549-8541 I www.gotoassist.com/processDr 



Physical Infrastructure 



CYBER@SWITCHING 



® 



Cyber Switching began pioneering power distribution 
technologies in 1994. Our PDUs are used to power cycle 
and manage power to blade servers, routers, SANs, and 
other data center equipment. Our intelligent PDUs can 
monitor current individually by outlet and also provide virtual 
circuit breaker protection on an individual outlet basis. No 
other PDU on the market offers these unique features. 



Products Sold: 

• Intelligent power management 

• Value-added power management 

• Metered power distribution 

• Three-phase power distribution 



Energy management 
and control 
Switches 
Patch Panels 



311-6277 I www.cyberswitching.com 



Physical Infrastructure 



PDU Cables" 

Innovator in data center efficiency 

PDU Cables is the leading supplier of power distribution 
cables assemblies to data centers in North America. PDU 
Cables has been serving this industry since 1981 and is the 
first independent cable assembly company to introduce 
colored conduit into the power distribution cable market, the 
first to get UL 478 listing, and the first to introduce the Power 
Cable and Equipment Configurator software tool. The 
company is centrally located in Minneapolis, Minn., allowing 
it to offer 24-hour turnaround and shipping time of just one 
or two days to almost any United States destination. 

Products Sold: 

• A range of power cables, cable seals, and power cord 



assemblies. 



(866) 631-4238 I www.pducables.com 



Physical Infrastructure 



designed and 
manufactured by ^ 

upsite^ 

technologies' 



Founded in 2001 , Upsite Technologies has established itself 
as a leader in the marketplace for high-availability data cen- 
ter solutions, concentrating on hot spots and energy-efficien- 
cy issues. Upsite founder Kenneth G. Brill recognized a need 
for products and solutions reaching far beyond standard 
engineering and consulting offerings. Upsite has developed 
a suite of products designed to increase the reliability and 
availability of data centers while reducing energy costs. 

Products Sold: 

A line of products designed to solve heat-density problems 
in data centers, including blanking panels, temperature 
strips, and raised floor grommets to seal cable openings. 



(505)982-7800 I www.upslte.com 



Storage 



aclaphe^ 



Adaptec provides I/O solutions that protect, accelerate, opti- 
mize, and condition data. Adaptec products are used in IT 
environments ranging from on-demand cloud computing to 
traditional enterprise data centers. The company's products 
enable data center managers, channel partners, and OEMs 
to deploy storage solutions to meet their customers' evolving 
IT requirements. More information is available at www 
.adaptec.com, on its blog at storageadvisors.adaptec.com, 
and at adaptec.com/facebook and twitter.com/Adaptec_lnc. 

Products Sold: 

Data storage I/O products, including ASICs, HBAs, SAT/V 
SAS and SCSI FiAID controllers, and software for IP SANs 



(408) 945-8600 | www.adaptec.com 



Physical Infrastructure 




Based in New York City, Hergo Ergonomic Support 
Systems is an independent designer and manufacturer of 
enclosure cabinet solutions, technical computer furniture, 
and modular racking systems. The company's products 
are designed to promote organization in the workspace 
and to increase the productivity of computers, peripherals, 
and communications equipment. Hergo is known for its 
high-quality products and superior customer service. 



Products Sold: 

• Racks 

• Enclosures/cabinets 

• Motorized workstations 

• Flat-panel arms 



Computer desks 
Cable management 
Power management 



222-7270 I www.hergo.com 
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PDUs 



direct 



Established in 2008, PDUsDirect.com is an online whole- 
saler providing a select line of PDUs for sen/er and net- 
worked environments. PDUs Direct's basic, metered, and 
switched Rack PDUs provide local and remote power 
management, power monitoring, and environmental moni- 
toring. We pride ourselves in offering industrial-grade qual- 
ity products at the lowest prices, with the fastest shipping 
(most orders shipped within 24 hours) and simplest pur- 
chase process. 

Products Sold: 

A complete line of 20A PDUs, including metered, basic, 
and switched. 



751-7387 I pdusdirect.com 



Networking & VPN 







^ Nationwide Voice, Data and Vid&o 
Products and Services 



ASD's mission is to be the best nationwide provider of 
design, deployment, and project management services in 
the voice and data network integration industry. We offer 
turnkey, reliable, and cost-effective communications sys- 
tems tailored to fit the client. Our goal is to be the single 
point of contact for sen/ices to end users, systems integra- 
tors, manufacturers, building owners, and others. Our com- 
mitment includes delivering projects on time and on budget 
and offering superior, customized design. 

Products Sold: 

Voice and data network integration services, along with a 
line of networking-related products. 



(800) CABLING (222-5464) I www.lcat-lts.com 



Storage 




KO DUCTS 



Established in 1983, CMS Products is a leading innovator 
in data backup, encryption, and security technology. CMS 
Products has received global recognition for its work in 
developing leading-edge, easy-to-use products that 
revolutionize the notebook and desktop data backup/ 
restore and storage industry. 

Products Sold: 

• Backup and restore disaster recovery software and sys- 
tems, including laptop, desktop, and secure versions 

• Laptop hard drive upgrades 

• Data security products, including encryption software, 
encrypted portable backup, and encrypted flash drives 



(800)327-5773 | www.cmsproducts.com 
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Storage 



InMage 



InMage develops disk-based business application 
recovery solutions for both physical and virtual machine 
environments. The company's integrated recovery 
software supports local and remote backup and disaster 
recovery and application availability, performing 
exceptionally well in heterogeneous IT infrastructures 
with mixed platforms and storage. 

Products Sold: 

Disk-based recovery platforms for backup, disaster 
recovery, and application recovery 



(800)646-3617 | www.inmage.coin 



Security 




paloalto 



NETWORKS 

the network security company" 

Using patent-pending application-identification technologies, 
Palo Alto Networks reinvented the network firewall to 
provide companies unequaled visibility and control over the 
applications and related data coming into and out of compa- 
ny networks. Without negatively impacting performance, 
Sunnyvale, Calif., -based Palo Alto Networks' firewalls can 
identify and categorize over 950 applications and enforce 
access policies on a per-user or per-group basis. These 
firewalls also have integrated IPS and provide content scan- 
ning to defend against modern threats to the enterprise. 

Products Sold: 

PA-4000 series, PA-2000 series, and PA-500 next- 
generation firewalls, with throughput up to lOGbps. 



(866)320-4788 | www.paloaltonetworks.com 



Clients 



CAVIUM 

NETWORKS 



Since 2001 , Cavium Networks has been blazing a trail in 
the field of embedded multicore processors and has grown 
to become a foremost MIPS- and ARM-based semicon- 
ductor products supplier for the multibillion-dollar network- 
ing, communications, broadband, and consumer markets. 
The firm delivers a range of products that enable intelli- 
gent processing for networking, communications, and the 
digital home. 

Products Sold: 

MIPS- and ARM-based processor SOCs for enterprises, 
small to midsized businesses, and SOHOs. 



(650)623-7000 I www.caviumnetworks.com 



Equipment Dealer 



^■^P^L Information 
•^^^ Technology 
illr Trading 



At Information Technology Trading, our goal is to help you 
acquire the right hardware or software solution. We special- 
ize in purchasing and reselling data-processing equipment 
and have more than 21 years combined experience. We pro- 
vide services and system upgrades, DASD, communication, 
and memory. We're also an outlet for off-lease portfolios. 

Products Sold: 

• AS400, Advanced System/36, R/S6000, ES/9000, and 
PC systems (including lease and rental) 

• CPUs, memory, disks, tapes, displays, and controllers 

• Sen/ices, including system design and installation, 
maintenance, and buyback of existing hardware 
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Ig^ecv cleYourMedia 



RecycleYourMedia.com is concerned about the destruction 
of our environment caused by e-waste. We realize there 
needs to be a solution that is ecologically sensible, techno- 
logically reliable, and economically viable. The answer is to 
sell us your new, used, or even obsolete media. Your sensi- 
tive data is secure and destroyed with manufacturer- 
approved processes and equipment, and you will also be 
supplied a Confidentiality Agreement on request. It's easy to 
recycle your data cartridges with RecycleYourMedia.com. 

Products Purchased: 

Super DLTII / LT02, 3, 4 / AIT1 , 2, 3, 4 / AME2 / 9940 / 
3590 / MLR, SLR / TR5, 7 / VXA / V23 



(877)798-2737 I www.recycleyourmedia.com 



Servers 



Portwell 



Intel Embedded Alliance member American Portwell 
Technology is a wholly owned subsidiary of industrial com- 
puter innovator Portwell of Taiwan. It's known for its cus- 
tom solutions as well as for its rackmount and embedded 
computers used in industrial, medical, retail, financial, 
semiconductor equipment, mission-critical, and network 
security environments. 

Products Sold: 

Embedded, single-board, and rackmount computers; spe- 
cialty platforms; human-machine interfaces; and communi- 
cation appliances 



(510) 403-3399 | www.portwell.com 



Clients 



dtSearch^ 

www.dtsearch.com 



Maryland-based dtSearch started research and develop- 
ment in text retrieval in 1988. The company is known for 
speedy adoption of new programming standards, OSes, 
and file types. Plus, it has a flexible licensing model. 
Typical corporate use of dtSearch includes general infor- 
mation retrieval, Internet and intranet site searching, and 
email archiving and email filtering. 

Products Sold: 

Text retrieval products, including: 

• Desktop With Spider • Web With Spider 

• Network With Spider • Engine For Win & .NET 

• Publish For CD/DVDs • Engine For Linux 



(800)483-4637 I www.dtsearch.com 



Equipment Dealer 



• PaceButler buys used cell phones. 

• In business since 1987 

• Redeploy your used phones after upgrade 

• Donation option - directly to the non-profit of your choice 

• Dedicated to customer satisfaction 

- A+ Rating with the Better Business Bureau 

- Payment issued in four days 

• Dedicated to employee development 

- Book reading program 

- Health and fitness programs 

Products Sold: 

We buy used cell phones & PDAs, including Apple, LG, 
Blackberry, HTC, Motorola, Nextel, Nokia, PalmOne & 
Samsung. 



Security 



NEWTON 



SECURITY INC 

Newton Security designs and manufactures security 
products that stop instances of tailgating and piggybacking of 
unauthorized individuals into secure areas. T-DAR systems 
are in use around the world at airports, government 
buildings, data centers, research labs, power plants, and 
manufacturing sites. T-DAR technology utilizes 3D stereo 
machine vision to count and track individuals at secure 
locations. 

Products Sold: 

• Door systems 

• Mantrap systems 

• Immigration gates 

• Other types of access control systems 



(425)251-9494 I www.newtonsecurityinc.com 



Servers 



fro iAjit\] 



IN-WIN Development Inc., an ISO 9001 manufacturer of 
professional computer chassis, power supplies, and digi- 
tal storage devices, is the leading provider of enclosure 
solutions to system integrators worldwide. Founded in 
1986, IN-WIN provides high-quality chassis that conform 
to all safety regulations, as well as unsurpassed cus- 
tomer service. 

Products Sold: 

• Computer cases 

• Server cases 

• Power supplies 

• Storage devices 



(909)348-0588 | www.in-win.us 



Equipment Dealer 




IGS is an independent manufacturer and source of supply, 
sen/ice, and depot repair of obsolete Digital Equipment 
Corp. parts, products, and systems. We maintain an exten- 
sive inventory of DEC parts and equipment; some date from 
the 1960s. We refurbish and service these parts, adding 
current technology when applicable. We provide Advance 
Replacement Service within 24 hours if we have the item in 
stock and, with 75,000 stock items, chances are we will. 

Products Sold: 

Digital Equipment Corp. parts, products, and systems, 
including memory, storage, processors, display and video, 
printers, and cables, for repair, lease, or rental 



332-7278 I www.decparts.com 



Equipment Dealer 




In 1987, Pegasus Computer Marketing started providing 
mainframe products to the end-user market. What began as 
a sales-only organization soon adapted to offer in-house 
repair and refurbishment. During the past 10 years, Pegasus 
has focused primarily on the point-of-sale and barcode 
industries, buying, selling, and providing sen/ice contracts for 
anywhere from a few scanners to hundreds. 

Products Sold: 

We buy, sell, and service: 

• Point-Of-Sale Equipment and POS/PC Flat Panels 

• Wired and Wireless Barcode Hardware 

• Kronos Time Clocks and Accessories 



(877)715-3686 I www.itechtrading.com 



(800)248-5360 I www.pacebutler.com 



(800) 856-2111 I www.pegasuscomputer.net 
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THE DRAW 

AND 
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SOLVE! 



A legendary support team is 
already in your office — they just 
need the right tool. GoToAssist 
connects your team with your 
customers like never before with 
simple, powerful remote support. 
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